# Role-Based Access Management within a Hierarchical Structure
Organization and role must be created first in order to perform the related permission management for the user.
* **Organization** - Uses tree structure to realize permission control and group management for high-levels to restrict low-levels.
* **Role** - This is the item list displayed on the left side of the management interface, used to achieve the expectation of controlling the functions used.
### Creating Organizations
1. Log in, and go to **AC User Management** > **Organization** to view the organizational tree diagram.
2. Click **Create** to access the creation page.
3. Fill in the required fields**: Dept. name, Contacts name, Contacts telephone** and **Contacts email**.
4. Click the button to the right of **Belonged dept.**, select the organization belonged to from the tree diagram that popped up, and click **Add** to complete adding organization.
5. To confirm whether the organization was added successfully, you can view the tree diagram. If the organization was added successfully, you can see the name of the organization added to the right of **Belonged dept.** on the organizational tree diagram.
### Creating Roles
1. Go to **AC User Management** > **Roles** to view the current list of roles.
2. Click **Create** in the upper right corner to access the role creation page.
3. Fill in the required field: **Role.**
4. In the **Permissions** field, select the required permissions for the role: click on the parent item to expand the child items, select the necessary options, and click **Create** to complete the creation.
5. Enter the newly created role code in the keyword input box, and click **Search** to view the role details in the list.
### Creating User Authorization Roles and Organizations
1. Go to **AC User Management** > **Users** to view the list of existing users.
2. Click **Create** to access the creation page.
3. Fill in the data or make selections as instructed below. The fields marked with “\*” are required.
4. Click **Create** to complete the creation.
5. Enter the username in the keyword input box, and click **Search** to view the user data.
### Login to Admin Console
Log in with the newly created username to verify that the user can log in successfully.
1. Open the web browser, and enter the following URL in the address bar:\
\&#xNAN;*https\://ip address:port number/dgrv4/ac4/login*.
2. Log in with the username and password you registered to digiRunner in the **Username** and **User password** field.
3. Click **Login**. If the authentication is correct, you will be directed to the digiRunner Admin Console.
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.tpi.dev/most-common-use-cases/registering-user-account-and-logging-in-admin-console.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.