# Managing Users

> See which endpoint user is assigned to which device, and why that assignment matters for targeting and enrollment.

Source: https://docs.capaone.com/capaone/getting-started/managing-users/  
Product: CapaOne — a separate CapaSystems product; do not apply this page to any other.

**Users** in CapaOne are the people associated with managed devices — the endpoint users, not
CapaOne administrators. You find them under **Management → Users**.

Knowing who is assigned to which device matters for accountability, targeting, and enrollment
workflows. A device with an assigned user is easier to identify and contact when something needs
attention.

:::note[Users vs. administrators]
This section is about **endpoint users** — the people who use managed devices. CapaOne
administrator accounts (the people who manage CapaOne itself) are handled separately under
**Account → Users & Organization**.
:::

## Creating users manually

1. Go to **Management → Users** and click **New**.
2. Enter the user's name and email address.
3. Link the user to one or more endpoints.

Manual user creation is suitable for small environments or for adding a specific user that is
not covered by directory sync.

## Syncing users from a directory

For larger environments, creating users manually does not scale. CapaOne can sync users
automatically from **Microsoft Entra ID** (formerly Azure AD) via the Integrations page.

Synced users show up in the Users list with their directory source indicated. When a user is
updated or removed in the directory, CapaOne reflects the change after the next sync.

See [Integrate CapaOne with Entra ID](/capaone/integrations/integrate-capaone-with-entra-id/)
for setup steps.

## Linking users to endpoints

A user can be linked to one or more endpoints. The endpoint count next to each user in the list
shows how many devices are currently associated with them. Click the count to see which endpoints.

On the endpoint detail page, the assigned user is visible and can be changed. This is useful
when a device changes hands — update the user assignment to keep records accurate.

## Good to know

- **Local users** are created directly in CapaOne. Synced users come from an external directory.
  Both types appear in the same list, differentiated by a badge.
- **Removing a user** does not remove their associated endpoints from CapaOne — the devices
  remain managed, but the user association is cleared.
- **Users are per-organization** — each organization in CapaOne has its own user list.