<a id="what-administer-permissions-gives-you"></a>
<a id="admin-guide-administer-permissions"></a>
# What Administer Permissions gives you

The **Administer Permissions** permission lets you decide what other people may do. It does not, on its own, let you do everything else.

With Administer Permissions you can:

- create, change and delete [Organization Roles](../organizations/roles.html.md#organization-roles), and choose which role each user holds;
- create, change, merge and delete [Project Roles](../urls/project_roles/index.html.md#project-roles);
- open the [Org Team Members](../organizations/team.html.md#organization-team) page and change a user's role, username, email address and whether their account is active;
- see the [API tokens](../organizations/api_tokens.html.md#organization-api-tokens) held by users in your Organization, and revoke them;
- see the [Licenses](../organizations/licenses.html.md#organization-licenses) page.

You are also given every permission on every URL in your Organization. This lets you reach the URLs you manage permissions for. You get these URL permissions when you are given Administer Permissions, and on any URL created while you hold it.

<a id="what-it-does-not-give-you"></a>
## What it does not give you

Administer Permissions does not include the other Organization permissions, such as **Create URLs**, **Delete URLs** or **Reports**. If you need one of them, choose a role for yourself that has both.

> **Important:** If Administer Permissions is taken away from someone, they keep every URL permission they were given with it. Remove those on each URL's [Team page](../urls/url_teams.html.md#url-teams) as well.

<a id="keep-at-least-two-people"></a>
## Keep at least two people

You cannot remove Administer Permissions from a role you hold yourself. This stops you removing it from yourself by mistake. It does not stop someone else deactivating you: a URL Manager can deactivate people in your Organization, and you hold every URL permission. Give the permission to at least two people, so that someone can step in when the other is away or deactivated.

> **See also:** [What "Administer Permissions" allows](../organizations/roles.html.md#what-administer-permissions-allows) and [Access to URLs](../organizations/roles.html.md#administer-permissions-url-access).
