# Employees management
### **On Hideez Enterprise Server, you can perform the following actions with employees:**
* Edit personal information.
* See the employee's details
* Change roles.
* Deactivate accounts.
* Delete accounts.
* Unlock accounts after failed login attempts.
* [Activate or reactivate the Single Sign-On (SSO) feature](https://enterprise.hideez.com/hideez-enterprise-server/employees/edit-employee/activate-or-reactivate-the-single-sign-on-sso-feature)
## **Editing Personal Information**
An administrator can edit the following details of an employee:
* First Name.
* Last Name.
* Email Address.
* Phone Number.
* Company.
* Department.
* Position.
**How to edit:**
1. Go to the **Employees** section.
2. Select the required employee and click **Actions → Edit**.
{% hint style="info" %}
**Note:** Editing is not available for employees imported from Active Directory or EntraID (Azure AD)
{% endhint %}
## **Viewing Employee Details**
To view user account information, you can:
* Double-click on the row with the user's name.
* Click on the row with the desired user and click the **Details** button.
All Hideez keys and user accounts are visible in the window that appears.
In this window, you can [create a personal account](https://enterprise.hideez.com/hideez-enterprise-server/accounts/how-to-work-with-personal-employee-accounts), [add a shared account](https://enterprise.hideez.com/hideez-enterprise-server/accounts/how-to-work-with-shared-employee-accounts), [edit a personal account](https://enterprise.hideez.com/hideez-enterprise-server/accounts/changing-and-deleting-a-personal-account), [add a key to the user](https://enterprise.hideez.com/hideez-enterprise-server/hardware-vaults/assign-a-key-to-the-user), and [delete the key from the user](https://enterprise.hideez.com/hideez-enterprise-server/hardware-vaults/untie-the-key-from-the-user).
Also, here you can see the list of user's FIDO2 authenticators and Hideez Authenticator applications and delete them:
## **Changing an Employee's Role**
The administrator can assign the administrator role to an employee or revert them to a regular user.
**How to change a role:**
1. Go to the **Employees** section.
2. Select the required employee and click **Actions → Change Role**.
3. Select the new role for the employee.
## **Deactivating an Employee**
A deactivated employee:
* Cannot log in to the Hideez Server.
* Loses access to web services that use Single Sign-On via Hideez Server.
* Loses access to Active Directory if imported from there.
**How to deactivate:**
1. Go to the **Employees** section.
2. Select the employee and click **Actions → Deactivate**.
## Delete Employee
**How to delete:**
1. Go to the **Employees** section.
2. Select the employee and click **Actions → Delete**.
{% hint style="info" %}
**Important:**
* Unlink the Hideez Key from the employee before deleting them.
* If this is not done, the system will display an error message.
{% endhint %}
## Unlock employee account
\
If a user attempts to log in with the wrong password 10 times, their account will be locked. The user can wait for 15 minutes for the account to be automatically unlocked and then log in with the correct password, or they can ask the administrator to manually unlock the account following the guide below.
Employees with locked accounts have a corresponding icon next to their name.
To unlock such account click it and then click the "**Unlock**" button.
Then confirm the unlock operation.
.png?alt=media&token=da14cff1-3f7f-4be8-8d06-acd25d83aee2)
{% endhint %}
## Unlock employee account
\
If a user attempts to log in with the wrong password 10 times, their account will be locked. The user can wait for 15 minutes for the account to be automatically unlocked and then log in with the correct password, or they can ask the administrator to manually unlock the account following the guide below.
