> For the complete documentation index, see [llms.txt](https://docs.adaptiva.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.adaptiva.com/platform/user-guide/security-access/rbac.md).

# Role-based access control

Role-based access control (RBAC) allows your organization to manage who has access to resources in the OneSite Platform, what resources they have access to, and what they can do with these resources.

## Role-based Access Control (RBAC) in the OneSite Platform

You can use built-in roles and/or create custom roles to meet your organization’s needs.

RBAC allows you to:

* Assign permissions to specific job functions like operations
* Maintain data protection and regulatory compliance
* Protect sensitive data with the principle of least privilege
* Create branch office administrators for specific business units (Patch only)

## Explore the security roles

1. Log in to the Adaptiva Admin Portal.
2. Click the **gear icon > Settings > Security > Roles**.

The root roles for the OneSite platform are in the Roles folder, while folders will exist for product specific roles when licensed.

![Roles Panel](https://1238239958-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FzBcNZqjCKqgdpA83eD4o%2Fuploads%2Fgit-blob-c0ed4383ad5b14d61ad8889b2821c8c726bb1c18%2Froles.png?alt=media)

## View a role and assign members to it

You can view the permissions and membership of a role in the role details.

1. Select a role to open the properties page. You can view the role assignments and permissions detail for the role.
2. Under Direct Administrators, click **Browse** and select a user to associate with this role and click **OK**.
3. Click **Save**.

## Create a custom role

You can create a custom role in the **Role** security settings.

1. On **Roles** panel, select the **Roles** folder.
2. Click **New**.
3. Enter a name and description for the role (ie. Security Analyst).
4. On the detail page for the role, scroll down to Permissions.
5. Click **Create New Permissions**.
6. Next to Class, click **Browse**.
7. On the Class Permission Definition page, search for OIDC, and select **OidcProvider**.
8. Click **OK**.
9. On the Class Level Permissions page, under Permissions, configure the following: a. Read: Allow b. Export: Allow
10. Click **Save**.

## Audit role permission with Permissions Viewer

You can use Permissions Viewer to see the permissions scope for any role or user you configure.

1. Click the **Permissions Viewer** navigation tab.
2. Next to Role, click **Browse**.
3. Select a role (ex. Security Analyst) and click **OK**.
4. Under Object Scope, type OIDC and then select **OIDCProvider**. In the Resultant Permissions pane, you can see the permissions this role has on the OidcProvider class.