> For the complete documentation index, see [llms.txt](https://docs.brigge.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.brigge.ai/documentation/roles-and-permissions.md). # Roles & permissions ## Overview A *role* is associated with a set of *permissions* that determine what a [user](/documentation/users.md) can see and do in Brigge, after logging in. When you first register to use Brigge, your user account is created with the topmost `admin` role, so you have full access to the platform (including the ability to [invite more users](/documentation/users.md#inviting-users-for-your-organisation)). When sending invites, you decide what role to assign; this can be equal to or lower than your own. ## What roles are available? A number of roles are available 'out of the box'. These are ['main' roles](#standard-roles-summary) (`admin`, `manager`, `user` and `read-only`), but as an `admin` user, you can also [create custom roles](#adding-a-custom-role) to assign permissions at a more granular level. ## Standard roles summary Access for Brigge's 'main' roles is summarised below.

Capability	Admin	Manager	User
Auth flows (create & manage)	yes	yes	yes
Billing & subscriptions (view & manage)	yes	no	no
Brigge AI assistant	yes	no	no
Company settings (view & manage)	yes	no	no
Custom fields (create & manage variables)	yes	yes	yes
Custom scripts (create & execute)	yes	no	no
Data warehouses (create & manage)	yes	yes	yes
Environments (create & manage)	yes	yes	no
File-upload definitions (create & manage)	yes	no	no
Marketplace entries (view & install)	yes	no	no
Notification groups (create & manage)	yes	no	no
Notification templates (create & manage)	yes	no	no
Pipeline deployments (create & manage)	yes	no	no
Pipeline field mappings (create & manage)	yes	no	no
Pipeline groups (build & manage)	yes	yes	yes
Pipeline payloads (view)	yes	yes	yes
Pipeline runs (view)	yes	yes	yes
Pipeline versions (view)	yes	no	no
Pipeline-run actions (trigger/retry/stop)	yes	no	no
Pipelines (build & manage)	yes	yes	yes
Pipeline transactions (create & manage)	yes	no	no
Pipeline transactions (view)	yes	yes	yes
Pipeline trigger schedules	yes	no	no
Pipeline trigger webhooks	yes	no	no
Roles & permissions (view)	yes	yes	yes
Roles & permissions (create & manage)	yes	no	no
Schemas (create)	yes	no	no
System credentials (create & manage)	yes	yes	yes
Systems (build, test & manage)	yes	yes	yes
User management	yes	no	no

{% hint style="info" %} The `read-only` role is not shown here as it simply applies read access for all permissions. {% endhint %} ## Working with roles {% hint style="info" %} Working with roles and associated permissions is restricted by your own role - you will only see information and options that your user role permits. {% endhint %}

Viewing existing roles & permissions

To view existing roles for your organisation, select *Settings* from the navigation menu, then select *Roles* from the *User management* section. All existing roles (that your own role has permission to view or modify) are shown. For example:

From here, click any role to view and update permissions. For example:

Permissions are displayed by category and those that are currently active are filled with a solid colour. For example:

Viewing & updating permissions for a role

Having [selected a role from the *Roles*](#viewing-existing-roles-and-permissions) page, all permissions (that your own role allows you to manage) are displayed in a series of categories.

Options for updating permissions are summarised below: {% stepper %} {% step %} **Permission categories** Permissions are grouped into the following categories: *Users and companies*; *Pipelines*; *Systems*; *History*; *AI*; *Logs & reporting*. {% endstep %} {% step %} **Quick selections** Quick select options * `clear all`. Clear all existing selections, ready to start again. * `read all`. Select only the `read` permission for all items (you can then select any other permissions that you want to include, individually). * `full access`. Select all permissions for all items (you can then de-select any that you wish to exclude, individually). {% endstep %} {% step %} **Individual permissions** The permissions you see will depend on your own role. Those shown can be selected (activated) and de-selected (de-activated) as needed. The most common permissions are:

Permission	Allows users to...
`read`	View what items are available, without showing the details of any individual item. For example, allow users to read the pipelines list, but not to show details for a specific pipeline.
`show`	View details for an item. For example, show the setup of a pipeline in the editor.
`create`	Create new items. For example, create a new pipeline.
`update`	Make changes to an item. For example, update pipeline nodes and settings.
`delete`	Delete an item. For example, delete a pipeline.

{% endstep %} {% endstepper %}

Adding a custom role

To add a custom role, click the `new role` button from the [*Roles* page](#viewing-existing-roles-and-permissions). For example:

Click in the `add a description` field to enter edit mode, then provide a name/description for this role:

Then [apply the required permissions](#viewing-and-updating-permissions-for-a-role) and save the role.