# Update domains

There are different types of domain updates -- updates to the domain itself, and updates to the entities within the domain.

## Update the alias and description

You can only update the alias and description of a subdomain from the root domain.

To update the alias and description:

1. Select the root domain from the **Domain** drop-down menu.
2. Click **Domains**.
3. In the domain hierarchy, click the domain you want to update.
4. Click **Edit information**.
5. In **Name**, update the domain alias.
6. In **Description**, update the description.
7. Click **Submit for approval** and [sign the operation with the app](/products/custody/v1.15/ui/get-started/key-operations/intent-signature).


The domain is updated when the domain update intent is successfully approved and executed.

## Update the read-only access roles of a domain

To update the access management settings:

1. Select the domain or another domain above it in the same hierarchy from the **Domain** drop-down menu.
2. Click **Domains**.
3. In the domain hierarchy, click the domain for which you want to update access management.
4. Click **Edit read permissions**.
5. In **Read permissions**, add or remove user roles.
6. Select the entities each user role can view.
7. Click **Submit for approval** and [sign the operation with the app](/products/custody/v1.15/ui/get-started/key-operations/intent-signature).


The domain is updated when the domain update intent is successfully approved and executed.

## Lock or unlock a domain

To lock or unlock a domain:

1. Select the domain or another domain above it in the same hierarchy from the **Domain** drop-down menu.
2. Click **Domains**.
3. In the domain hierarchy, click the domain you want to lock or unlock.
4. Depending on the current state, perform one of the following:
  - If the domain is unlocked, click **Lock**.
  - If the domain is locked, click **Unlock**.
5. [Sign the operation with the app](/products/custody/v1.15/ui/get-started/key-operations/intent-signature).


The domain is unlocked when the domain unlock intent is successfully approved and executed.

## Add or update entities in a domain

To add new entities to a domain:

1. Select the domain to which to add a new entity from the **Domain** drop-down menu.
2. Follow the relevant entity creation or update process, for example, [Create users](/products/custody/v1.15/ui/environment/user/create).