-2. Define who can access the tenant account by selecting the user groups of your account and the applicable [user role](/manage/team/add-users-to-your-network#manage-user-roles) when they switch to the tenant. Only users from the selected groups will
+2. Define who can access the tenant account by selecting the user groups of your account and the applicable [user role](/manage/team/user-roles) when they switch to the tenant. Only users from the selected groups will
be able to switch to and manage the tenant account.
diff --git a/src/pages/manage/settings/delete-account.mdx b/src/pages/manage/settings/delete-account.mdx
index 99ebd9fb..abef7727 100644
--- a/src/pages/manage/settings/delete-account.mdx
+++ b/src/pages/manage/settings/delete-account.mdx
@@ -1,7 +1,7 @@
import {Note} from "@/components/mdx";
# Delete your NetBird account
-To delete your NetBird organization account, you must be a user with the [owner role](/manage/team/add-users-to-your-network#manage-user-roles). You can ask the owner to delete the organization account if you are not the account owner.
+To delete your NetBird organization account, you must be a user with the [owner role](/manage/team/user-roles#owner). You can ask the owner to delete the organization account if you are not the account owner.
## Delete your account
- 
-
- 
-
diff --git a/src/pages/manage/team/user-roles.mdx b/src/pages/manage/team/user-roles.mdx
new file mode 100644
index 00000000..a9a31f1d
--- /dev/null
+++ b/src/pages/manage/team/user-roles.mdx
@@ -0,0 +1,82 @@
+import {Note} from "@/components/mdx"
+
+export const description = "Understand NetBird's user roles โ Owner, Admin, Network Admin, Billing Admin, Auditor, and User โ what each can access, and how to assign them."
+
+# User Roles
+
+NetBird has six user roles - `Owner`, `Admin`, `Network Admin`, `Billing Admin`, `Auditor`, and `User`. A user's role controls the level of access they have to your account, both in the dashboard and through the management API.
+
+## Permissions at a glance
+
+Rows are grouped by what a `Network Admin` can do, from full access down to no access.
+
+| Area | Owner | Admin | Network Admin | Billing Admin | Auditor | User |
+| --: | :--: | :--: | :--: | :--: | :--: | :--: |
+| Control Center | โ
| โ
| โ
| โ | ๐ | โ |
+| Access Control | โ
| โ
| โ
| โ | ๐ | โ |
+| Network Routing | โ
| โ
| โ
| โ | ๐ | โ |
+| DNS | โ
| โ
| โ
| โ | ๐ | โ |
+| Peers | โ
| โ
| ๐ | โ | ๐ | ๐1 |
+| Setup Keys | โ
| โ
| ๐ | โ | ๐ | โ |
+| Team | โ
| โ
| ๐ | โ | ๐ | โ |
+| Activity | โ
| โ
| ๐ | โ | ๐ | โ |
+| Settings | โ
| โ
| ๐ | โ
2 | ๐ | โ |
+| Reverse Proxy | โ
| โ
| โ | โ | ๐ | โ |
+| Tenants | โ
| โ
| โ | โ | ๐ | โ |
+| Integrations | โ
| โ
| โ | โ | ๐ | โ |
+
+**Legend:** โ
= Full access ยท ๐ = Read only ยท โ = No access
+
+1 A `User` can only see the peers they own and peers they're allowed to connect to.
+
+2 A `Billing Admin`'s Settings access is limited to **Plans & Billing** and **Invoices**.
+
+## Owner
+The `Owner` has full access to the account and can manage every aspect of it. There can be only one account owner in NetBird. Owners are the only users who can delete the organization account - see [Delete NetBird account](/manage/settings/delete-account) for more.
+
+## Admin
+An `Admin` has full access to the account, with two exceptions: administrators can't delete or change the role of the `Owner`, and they can't delete the organization account.
+
+## Network Admin
+A `Network Admin` fully manages network configuration - Control Center, Access Control, Network Routing, and DNS. They have read-only access to Peers, Setup Keys, Team, Activity, and Settings, and no access to Reverse Proxy, Tenants, or Integrations. A `Network Admin` can view setup keys but not create them, and can't invite users or create service users.
+
+## Billing Admin
+A `Billing Admin` manages billing only. They can access `Settings` โ `Plans & Billing` and `Settings` โ `Invoices`, and have no access to any other part of the account.
+
+## Auditor
+An `Auditor` can read every configuration in the account but can't modify anything.
+
+## User
+A `User` has limited access: they can view the peers they own and other peers they're allowed to connect to.
+
+## Roles and the API
+Roles apply the same way whether a user works in the dashboard or through the [NetBird management API](/api) - a user's permissions over API resources match their role. Every role except `User` can create a personal access token that carries the same permissions as that user's role, so they can interact with the API programmatically.
+
+## Roles and identity provider sync
+
+ Roles are managed inside NetBird. When you provision users and groups from your identity provider, synced groups are only used for group membership and will not change a user's NetBird role.
+
+
+## Assign a role
+To change a user's role, go to the `Team` tab, select the `Users` tab, and click the user you want to update:
+
+ Only users with the `Owner` role can assign another user as `Owner`; this action transfers the `Owner` role to the other user, making the current user an `Admin`.
+
+
+## Get started
+
+
+
+
+
+
+
+
+- Make sure to [star us on GitHub](https://github.com/netbirdio/netbird)
+- Follow us [on X](https://x.com/netbird)
+- Join our [Slack Channel](/slack-url)
+- NetBird [latest release](https://github.com/netbirdio/netbird/releases) on GitHub