Summary and recommendation
RingCentral user management can be run manually, but complexity usually increases with role models, licensing gates, and offboarding dependencies. This guide gives the exact mechanics and where automation has the biggest impact.
RingCentral user management runs through the Admin Portal at https://service.ringcentral.com under Users > User List.
Three role tiers cover most needs: Super Admin (full, unrestricted access), Standard User (personal settings only), and Custom Roles (admin-defined permission subsets available on Advanced and Ultra plans only).
Every app in your stack that routes calls or messages through RingCentral depends on users being correctly licensed and activated - gaps here surface as missed calls, broken queues, or silent routing failures.
Quick facts
| Admin console path | Admin Portal > Users > User List |
| Admin console URL | Official docs |
| SCIM available | Yes |
| SCIM tier required | Core: $20/user/mo, Advanced: $25/user/mo, Ultra: $35/user/mo |
| SSO prerequisite | Yes |
User types and roles
| Role | Permissions | Cannot do | Plan required | Seat cost | Watch out for |
|---|---|---|---|---|---|
| Super Admin | Full access to all Admin Portal settings including billing, user management, roles, phone system configuration, and integrations. | Cannot be restricted below full admin access; role cannot be customized. | All plans (Core, Advanced, Ultra) | Consumes a licensed seat at the same per-user rate as the assigned plan tier | Only one Super Admin account is created by default at account setup; additional Super Admins must be explicitly assigned. |
| Standard (User) | Access to personal phone settings, voicemail, call logs, messaging, and video meetings within their assigned feature set. | Cannot access Admin Portal, manage other users, modify billing, or change system-wide settings. | All plans (Core, Advanced, Ultra) | Billed at the plan tier rate: Core $20/user/mo (annual), Advanced $25/user/mo (annual), Ultra $35/user/mo (annual) | Feature access (e.g., CRM integrations, toll-free minutes) is gated by plan tier, not just role. |
| Custom Role (Admin-defined) | Admin-configurable subset of permissions drawn from a granular permission list covering phone, messaging, video, billing view, user management, and reporting. | Cannot exceed the permissions of the assigning admin's own role. | Advanced or Ultra (custom roles require Advanced plan or higher) | No additional seat cost beyond the user's plan tier license | Custom roles must be created before they can be assigned; assigning a custom role does not change the user's license tier or billing. |
Permission model
- Model type: hybrid
- Description: RingCentral uses a role-based access control model with predefined system roles (Super Admin, Phone System Admin, Billing Admin, Standard User, etc.) and the ability to create custom roles on Advanced and Ultra plans. Custom roles are built by selecting from a granular list of permissions across phone system, messaging, video, user management, and reporting categories.
- Custom roles: Yes
- Custom roles plan: Advanced or Ultra
- Granularity: Permission-level granularity within functional categories: phone system administration, user management, billing access, call queue management, reporting, messaging, and video settings.
How to add users
- Log in to the Admin Portal at https://service.ringcentral.com
- Navigate to Users > User List
- Click 'Add User'
- Select the user type (Digital User, Phone System User, or Video User depending on plan)
- Enter required fields: first name, last name, email address, and assign a phone number or extension
- Select the user's role (defaults to Standard User)
- Choose the license/plan tier to assign
- Click 'Save & Invite' to send an activation email, or 'Save' to configure further before inviting
Required fields: First name, Last name, Email address, Extension number (auto-assigned or manually set), License tier selection (Core, Advanced, or Ultra)
Watch out for:
- A purchased license must be available before a new user can be added; the system will not allow adding users beyond the purchased seat count.
- Phone number assignment requires an available DID in the account's number inventory; numbers must be purchased separately if inventory is exhausted.
- The activation email expires; if the user does not activate within the validity window, the admin must resend the invite from the User List.
- Users added without a phone number assigned will have limited functionality until a number is attached.
- Email address must be unique across the RingCentral platform, not just within the account.
| Bulk option | Availability | Notes |
|---|---|---|
| CSV import | Yes | Admin Portal > Users > User List > Import Users (CSV template downloadable from the same page) |
| Domain whitelisting | No | Automatic domain-based user add |
| IdP provisioning | Yes | Enterprise (SCIM 2.0 provisioning via Okta, Microsoft Entra ID, or OneLogin; requires SSO to be configured first) |
How to remove or deactivate users
- Can delete users: Yes
- Delete/deactivate behavior: RingCentral supports both deactivation (disabling) and permanent deletion of users. Deactivation suspends the user's access and retains their data, extension, and configuration. Deletion permanently removes the user record. Admins should deactivate first to preserve data and free the license for reassignment; deletion is irreversible.
- Log in to the Admin Portal at https://service.ringcentral.com
- Navigate to Users > User List
- Locate the user using search or filters
- Click the user's name to open their profile
- Click the status toggle or select 'Disable' from the action menu
- Confirm the action in the dialog prompt
- The user's status changes to 'Disabled'; their license is freed for reassignment
| Data impact | Behavior |
|---|---|
| Owned records | Call logs, voicemail recordings, and fax records associated with the user's extension are retained after deactivation. Upon deletion, these records may be permanently removed. |
| Shared content | Messages in team messaging (RingCentral app) sent by the user remain visible to other participants after deactivation. Shared call queues and ring groups must be manually updated to remove the disabled user. |
| Integrations | Third-party integrations (CRM connectors, calendar sync) linked to the user's account will lose their authentication tokens upon deactivation or deletion and must be reconfigured if the license is reassigned to a new user. |
| License freed | The license seat is freed immediately upon deactivation and can be reassigned to a new user without waiting for a billing cycle. |
Watch out for:
- Disabling a user does not automatically remove them from call queues, ring groups, or IVR menus; these must be updated manually to avoid routing failures.
- A deleted user's direct phone number (DID) is returned to the account's number inventory and can be reassigned, but this must be done manually.
- Voicemail greetings and personal settings are lost upon deletion and cannot be recovered.
- If the user is the sole member of a call queue or the only admin of a team, those resources must be reassigned before or immediately after deactivation.
- SCIM-provisioned users deactivated via the IdP are disabled in RingCentral but not automatically deleted; deletion requires a separate action in the Admin Portal or via SCIM DELETE call.
License and seat management
| Seat type | Includes | Cost |
|---|---|---|
| Core | Unlimited domestic calling, 25 SMS/user/mo, team messaging, video meetings (up to 100 participants), basic call management, and standard integrations. | $20/user/mo (annual) or $30/user/mo (monthly) |
| Advanced | Everything in Core plus advanced call queues, CRM integrations (Salesforce, HubSpot, Zendesk, ServiceNow), auto-call recording, advanced analytics, and unlimited SMS. | $25/user/mo (annual) or $35/user/mo (monthly) |
| Ultra | Everything in Advanced plus 10,000 toll-free minutes/mo, unlimited storage for files and recordings, device analytics, and unlimited video meeting duration. | $35/user/mo (annual) or $45/user/mo (monthly) |
- Where to check usage: Admin Portal > Billing > Licenses & Inventory (shows total purchased seats, assigned seats, and available seats per tier)
- How to identify unused seats: Admin Portal > Users > User List, then filter by Status = 'Disabled' or sort by Last Login date to identify inactive licensed users. The Billing > Licenses & Inventory page shows unassigned seat counts per tier.
- Billing notes: Licenses are billed on a per-seat basis at the tier level. Downgrading a user from Ultra to Core mid-cycle does not generate an immediate credit; adjustments are applied at the next billing cycle. Adding seats above the contracted count triggers prorated charges. Annual contracts require purchasing a minimum seat count upfront; reducing seats below the contracted minimum is not permitted until renewal.
The cost of manual management
Licenses must be purchased before users can be added; the Admin Portal blocks provisioning if no unassigned seats are available. Three RingEX tiers exist: Core ($20/user/mo annual or $30/user/mo monthly), Advanced ($25/user/mo annual or $35/user/mo monthly), and Ultra ($35/user/mo annual or $45/user/mo monthly).
Feature access - including CRM integrations and toll-free minutes - is gated by plan tier, not just role, so a user on the wrong tier will silently lack capabilities even if their role is correct.
Adding seats above the contracted count triggers prorated charges. Annual contracts lock in a minimum seat count; reductions below that floor are not permitted until renewal. Downgrading a user's tier mid-cycle does not generate an immediate credit - adjustments apply at the next billing cycle.
What IT admins are saying
Community evidence is not specific enough to quote or summarize yet for this app.
The decision
Use manual provisioning when your RingCentral seat count is small, changes are infrequent, or your plan tier does not include SCIM (Core and Advanced plans without Enterprise add-on). The Admin Portal gives direct control over license tier assignment, extension numbers, and role configuration that automated flows can obscure.
Switch to SCIM-based provisioning when headcount or turnover makes per-user Admin Portal work unsustainable. Before committing, confirm SSO (SAML 2.0) is fully configured - SCIM cannot be activated without it - and verify that unassigned seats exist at the correct tier for every user the IdP will attempt to provision.
Bottom line
RingCentral's manual user management is straightforward for small, stable teams but accumulates operational debt quickly at scale.
Every app and workflow that depends on RingCentral - call queues, CRM integrations, IVR routing - is only as reliable as the accuracy of your user and license state.
The license pre-purchase requirement, the absence of automatic queue cleanup on user disable, and the plan-gated custom roles are the three constraints most likely to cause problems; plan around them explicitly rather than discovering them during an offboarding or a provisioning run.
Automate RingCentral workflows without one-off scripts
Stitchflow builds and maintains end-to-end IT automation across your SaaS stack, including apps without APIs. Built for exactly how your company works, with human approvals where they matter.
