--- title: "Tenant isolation and manager assignment" slug: "tenant-isolation-and-manager-assignment" updated: 2025-08-14T09:59:09Z published: 2025-08-14T09:59:09Z canonical: "totara.help/tenant-isolation-and-manager-assignment" --- > ## Documentation Index > Fetch the complete documentation index at: https://totara.help/llms.txt > Use this file to discover all available pages before exploring further. # Tenant isolation and manager assignment When **tenant isolation** is enabled, you can configure the **Tenant user manager** role so that users with this role can create job assignments and assign managers within their own tenant. By default, the **Tenant user manager** role may not include all of the capabilities needed for this task. You can update the role’s permissions to include the required capabilities, ensuring that manager assignment works as expected while **tenant isolation** remains enabled. ### **Allowing manager assignment with tenant isolation enabled** > [!WARNING] > Note: This applies to sites with **multitenancy** and **Tenant isolation** enabled. > > In addition, the user profile must have **Job assignments** displayed in the [**User profile**](/19/docs/user-profile-block-settings) block. **Edit the Tenant user manager role** 1. Log in as a **Site Administrator**. 2. Go to *Quick-access menu > Permissions > Define roles.* 3. Click the edit icon ( ![](https://cdn.document360.io/a007399b-031e-436b-999a-528240e16f58/Images/Documentation/image-BV3EGZP1.png?sv=2026-02-06&spr=https&st=2026-11-01T18%3A11%3A21Z&se=2026-11-01T19%3A11%3A21Z&sr=c&sp=r&sig=rM3Dp5ou72eN2p1XaTW55KZm1yrL1kLC2BjU0%2FIn%2FWk%3D) ) for **Tenant user manager**. 4. Select **Allow** for the following capability `totara/hierarchy:assignuserposition` (**Assign user position**). 5. Click **Save changes**. **Assign the updated role to Tenant Site Manager users** 1. Go to *Quick-access menu > Tenants*. 2. Select the tenant name. 3. In the **Administration** block, select **Assign roles** under the the tenant name: ![](https://cdn.document360.io/a007399b-031e-436b-999a-528240e16f58/Images/Documentation/image-1755087564249.png?sv=2026-02-06&spr=https&st=2026-11-01T18%3A11%3A21Z&se=2026-11-01T19%3A11%3A21Z&sr=c&sp=r&sig=rM3Dp5ou72eN2p1XaTW55KZm1yrL1kLC2BjU0%2FIn%2FWk%3D) 1. Click on **Tenant user manager**. 2. Under **Potential** **users**, search for the user to be assigned the **Tenant user manager** role. 3. Click on the user(s), then click **Add** to assign the **Tenant user manager** role to the user(s). **Verify manager assignment works** 1. Log in as the user with the assigned **Tenant user manager** role. 2. Go to the *Quick-access menu > Users*. 3. Click the name of the user where you want to add a [**Job assignment**](/19/docs/create-a-job-assignment). 4. On the user’s profile, select **Add job assignments**. 5. Complete the **Job assignment** details by assigning another tenant member as their manager. 6. Click **Add job assignment**. Join the [Totara Community](https://totara.community/) for more resources to help you get the most out of Totara. © Copyright 2026 Totara Learning Solutions. All rights reserved.