ENS App and Explorer are on the Sepolia testnet. Features may change before mainnet.
Every ENSv2 name has roles: a list of who may do what with it, such as renew it, choose its resolver, manage its subnames or unregister it. The Roles tab on the name's page in ENS Explorer shows who holds which role. When you register a name, you are the only wallet on that list.
Good to know
Roles control the name itself. Who can edit its records is a separate list, held on the resolver. See Who can edit my records? Resolver roles in ENS Explorer.
Granting or revoking a role changes the name's token ID, the number that identifies the name as an NFT. Nothing else changes, but a marketplace listing tied to the old number stops working. See Why did my name's token ID change?
Read the Roles tab
Each row is a user. Each role can be held at two levels, shown as ticks in the Admin and Manager columns.
Manager can do the action. A Set Resolver manager can change the name's resolver; an Unregister manager can delete it.
Admin decides who holds the role, and can grant it to themselves — except Can Transfer, which is fixed when the name is registered and can never be handed out.
The roles a name can carry:
Renew: renew the name. Anyone can pay to renew a .eth name, so on a .eth name this role makes no practical difference. On a subname it does decide who can renew, unless the parent has opened renewals to everyone.
Set Resolver: choose the name's resolver, the contract on the Ethereum network that stores its records and answers questions about it.
Set Subregistry: choose the subregistry, the contract that manages names under this one (its subnames).
Unregister: delete the name, which frees it for anyone to register.
Can Transfer: move the name to another wallet. This one is fixed when the name is registered and cannot be handed out, so it never appears in the Add user form.
A freshly registered name shows ticks for you only: Can Transfer at Admin, and Set Resolver and Set Subregistry at both Admin and Manager. Nothing else is set until you grant it. The name's History tab shows how roles changed over time.
Give another wallet a role
Granting a role is a transaction, so you need a little ETH for gas. Gas is the network fee; your wallet shows it before you approve.
Open the name's Roles tab. In the section headed Parent registry roles, select Add user.
Enter the wallet's ENS name or address. The tick boxes become live once Explorer has found it. A box stays grey when that role cannot be handed out on this name.
Tick the roles to grant, at Manager or Admin level, or both.
Select Save. Explorer shows the estimated cost. Select Start, then Open wallet, and approve the transaction in your wallet. The user's row appears in the table once it confirms.
Important: Unregister, at either level, lets the holder delete the name. Grant it only to a wallet you trust.
Take a role away
On the Roles tab, select the icon at the end of the user's row. Their roles show as ticked boxes.
Untick a role to remove that one, or select Remove user to remove all of them.
Select Save. Explorer shows a Revoke roles step with the estimated cost. Select Start, then Open wallet, and approve in your wallet. The row updates once it confirms.
If you edit your own row, Explorer warns you: removing your own roles can lock you out of the name.
Common questions
Anyone can renew my name. Is that a problem?
No. Anyone can pay to renew a .eth name, and renewing only adds registration time; it never changes who owns or controls the name. Subnames can be different: the parent can put renew controls on them.
I see a Fuses tab instead of Roles. Why?
Names from the older ENSv1 system that were placed in the Name Wrapper contract ("wrapped") use fuses, one-way permission locks, instead of roles. ENS Explorer shows whichever system applies to the name you are viewing.