> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt
> Use this file to discover all available pages before exploring further.

# Access Manager via Lerian Console

> Manage supported Access Manager operations visually through Lerian Console: users, groups, machine-to-machine applications, and permission assignments.

Not everything in Access Manager needs an API call. Lerian Console gives you a visual home for the access tasks most administrators handle day to day. From Lerian Console you can create and manage users, assign permission groups, and set up machine-to-machine applications without touching the Identity APIs.

<Tip>
  If you need the full API surface, including providers, application-provider links, token flows, or explicit permission checks, use the [Using Access Manager](/en/platform/access-manager/using-access-manager) guide.
</Tip>

## Prerequisites

***

Before using Access Manager features in Lerian Console, make sure you have:

* Access Manager plugin installed and running
* Access Manager [enabled in your environment configuration](/en/platform/access-manager/enabling-access-manager)
* Admin credentials to log into Lerian Console

<Danger>
  After you enable **Access Manager**, protected API requests must include an `Authorization` header with a valid **Bearer access token**.

  Without this header, protected requests will be rejected, even for endpoints that were previously accessible without authentication.
</Danger>

## Where the Access Manager screens live

***

Lerian Console holds the Access Manager screens in two areas. Settings holds Applications and Security. Authorization holds Users, Roles, Groups, and Permissions, with its own sidebar.

<Steps>
  <Step>
    Log into Lerian Console with your admin credentials.
  </Step>

  <Step>
    Click the gear icon (<Icon icon="gear" />) in the top navigation bar.
  </Step>

  <Step>
    Select **Applications** or **Security** to open Settings. Select **Authorization** to open the Authorization area.
  </Step>
</Steps>

## What you can do

***

<Columns cols={2}>
  <Card title="Managing Users" icon="users" href="/en/platform/console/managing-users">
    Create, edit, and delete user accounts. Manage passwords and assign users to permission groups for human access.
  </Card>

  <Card title="Managing Applications" icon="layer-group" href="/en/platform/console/managing-applications">
    Create and review machine-to-machine applications for service integrations. Use generated client credentials for secure service communication.
  </Card>
</Columns>

## What still uses APIs

***

Console covers the common cases, but not all of them. For anything the Console does not cover, use the [Identity APIs](/en/reference/platform/access-manager/am-identity-apis) and [Auth APIs](/en/reference/platform/access-manager/am-auth-apis):

| Area | Use APIs for |
| - | - |
| Providers | Create, update, delete, link, unlink, and set default communication providers for MFA delivery. |
| Token flows | Request tokens, refresh tokens, retrieve user information, and end sessions. |
| Permission checks | Validate a resource-action decision or retrieve the authenticated user's effective permissions. |

<Note>
  Users enroll and manage their own multi-factor authentication methods in the Console, under Settings › Security.
</Note>

<Note>
  On Lerian Cloud, Console follows the same tenant boundary as the APIs. The logged-in administrator only sees and manages users and applications in their own tenant.
</Note>

<Note>
  You cannot delete your own user. Another administrator with the delete permission on users can delete a seeded administrator account. A later run of the install step can recreate it with its default password. Change that password before exposing the deployment. Make sure another administrator exists before removing one. You can update its details through the Console.
</Note>

## Next steps

***

* Learn about [best practices for Access Manager](/en/platform/access-manager/am-best-practices)
* Understand the [technical components](/en/platform/access-manager/am-components) of Access Manager
* Review [API reference](/en/reference/platform/access-manager/am-api-introduction) for programmatic access


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.