You can add or change users. Roles and business partners can be assigned to a user. User information can be changed by a user independently on the Identity Provider. The data changes can be synchronized.