.. _roles:

********************************
Role-Based Access Control
********************************

The Roles definitions are separate for Roles in Tenant and Roles in Apps.

Roles in the Tenant
===================

User can be assigned one out of two roles available:

- Tenant Admin
- Tenant User

.. image:: images/tenant-role-2025-02.png
    :alt: Roles available for tenant.
    :width: 60%
    :align: center

Tenant Admin
-------------
Tenant Admin has all permissions to manage the tenant.
They can:

- invite new users;
- edit permissions for existing users;
- add apps;
- manage subscriptions and billing.

Tenant User
-------------
Assigning a Tenant User role means this person will simply belong to the tenant. They can:

- edit their personal information; 
- see who else belongs to the tenant, and what their permissions are.

They do not have access to the billing, cannot add new apps to this tenant and cannot invite new users.

Roles in the apps
=================
The Roles available for the apps are App Admin and App User.

.. image:: images/app-permissions-2025-02.png
    :alt: Roles available for tenant.
    :width: 60%
    :align: center

App Admin
---------
App Admin has access to the whole functionality of the app.

App User
----------
App User has View only access to the app.

Feel free to email us with suggestions and requests for Role-Based Access Control inside the apps.