Both live on the same row. Go to Settings → Users & SSO, and find the person on the Users tab.
Change their role
The Role column is a dropdown on every row. Change it and it saves immediately. There is no confirm step and no save button.
The dropdown lists the five built-in roles plus any custom roles your firm has built. See User roles, and what each one can do.
Two changes the product will refuse:
A role holding permissions you do not hold yourself. You get "You cannot assign a role with capabilities you don't hold yourself." A Manager cannot promote anyone to Technical Admin, because Technical Admin can do five things a Manager cannot.
Removing the last person who can manage users. Your firm would have nobody able to invite, deactivate, or assign roles. Give someone else that ability first, then come back.
Deactivate someone
The rightmost column has an action to deactivate an active user. Their status badge turns gray and reads Inactive, and they can no longer sign in.
Deactivating keeps their history. Their past actions stay in the audit log and their name stays attached to the work they did. Reactivating them later is the same control in reverse.
Deactivating does not free up the seat. The seat stays bought and stays counted. If you are paying per seat, the Users tab will tell you plainly, with a line like "You're paying for 2 unused seats." Removing seats is a billing change, not a user change. See Your plan and your seats.
The three status badges
Badge | Means |
Invited (amber) | Invited, has never signed in. Clears itself on their first sign-in. |
Active (green) | Has signed in at least once. |
Inactive (gray) | Deactivated. Cannot sign in. |