Why can't I update user roles?
This guide explains why you might see the error message "User roles cannot be edited for externally managed organizations" – and what to do instead.
What causes this error?
If you see the message "User roles cannot be edited for externally managed organizations," it means your organization uses SSO and Microsoft Entra Security Groups to assign roles in Accountflow.
When roles are managed this way, changes need to be made in Microsoft Entra – not directly in Accountflow.
What should you do?
- Contact your Accountflow administrator. They manage the security groups in Microsoft Entra and can update your roles there.
- Not sure who your Accountflow administrator is? Contact Accountflow support for guidance.