## 2.8.1  Platform Users
Platform users are usually developers, administrators or operators who deploy, administer, and troubleshoot accounts, applications and services on SAP BTP. They're the users that have full access and give certain permissions, for instance, at global account, directory, or subaccount level. Members of subaccounts only have basic access.
Platform users who have administrative permissions can view or manage the list of global accounts, subaccounts, and environments, such as Cloud Foundry orgs and spaces. Platform users have access to them using the SAP BTP cockpit, the SAP BTP command-line interface (btp CLI), or environment-specific CLI, such as the Cloud Foundry (CF) CLI.
For platform users, there's a default identity provider [page 2335]. We expect that you have your own identity provider.
##  Recommendation
We strongly recommend that you configure your custom tenant of SAP Cloud Identity Services as the identity provider and connect SAP Cloud Identity Services to your own corporate identity provider.
For more information, see Trust and Federation with Identity Providers [page 2280].
##  Note
For China (Shanghai) and Government Cloud (US) regions, a different default identity provider is used, and you can't use SAP Cloud Identity Services as identity provider in the global account.
If you want to use two-factor authentication in the China (Shanghai) region, see this blog article on SAP Community .
## Member Management
Member management refers to managing permissions for platform users. Members have only basic access to SAP BTP.
Member management happens at global account, directory, subaccount, and environment level. Members' permissions apply to all operations that are associated with the global account, the organization, or the space, irrespective of the tool used. Depending on the scope and the cloud management tools you're using, you manage members in different ways:
| Global Accounts                                                                                                                                                                                                                                                                                                                                                                                                                                            | Directories                                                                                                                                                                                                                                                                                                                                                                                                                                                | Directories                                                                                                       | Subaccounts                                                                                                                                                                                                          |
|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| You manage global account members by assigning role collections to platform users. Use the following predefined role collections: • Global Account Administrator • Global Account Viewer Assign these role collections from the SAP BTP cockpit or the btp CLI. See:                                                                                                                                                                                       | You manage directory members by assigning role collections to platform users. Use the following predefined role                                                                                                                                                                                                                                                                                                                                            | You manage directory members by assigning role collections to platform users. Use the following predefined role   | You manage subaccount members by assigning role collections to platform users.  Note Neo subaccounts don't use role collections. For more information, see Manag- ing Member Authorizations in the Neo Environment. |
| Role Collections and Roles in Global Ac- counts, Directories, and Subaccounts [page 125] Add Members to Your Global Account [page 2211] Create Users [page 2347] collections: • Directory Administrator • Directory Viewer Assign these role collections SAP BTP cockpit or the See: Role Collections and counts, Directories, and [page 125] Create Users [page 2347] Manage Users in Directories Member Management in the Cloud Foundry Environment Orgs | Role Collections and Roles in Global Ac- counts, Directories, and Subaccounts [page 125] Add Members to Your Global Account [page 2211] Create Users [page 2347] collections: • Directory Administrator • Directory Viewer Assign these role collections SAP BTP cockpit or the See: Role Collections and counts, Directories, and [page 125] Create Users [page 2347] Manage Users in Directories Member Management in the Cloud Foundry Environment Orgs |                                                                                                                   |                                                                                                                                                                                                                      |
| Manage org members on the Members page at environment level in the SAP BTP cockpit or with the Cloud Foundry CLI. A platform user added as an org member can be either an Org Manager or an Org Auditor or implicitly an Org User . in A a                                                                                                                                                                                                                 | Manage org members on the Members page at environment level in the SAP BTP cockpit or with the Cloud Foundry CLI. A platform user added as an org member can be either an Org Manager or an Org Auditor or implicitly an Org User . in A a                                                                                                                                                                                                                 | Spaces Manage space members on the Members page at space level the SAP BTP cockpit or with the Cloud Foundry CLI. | Spaces Manage space members on the Members page at space level the SAP BTP cockpit or with the Cloud Foundry CLI.                                                                                                    |