# Creating and editing roles This page provides guidance on creating and editing roles to customize user access and control in accordance with your organization's requirements. To create and edit roles, you need to access the "**Roles**" page within the "**Users and Roles**" tab. {% hint style="warning" %} User management tasks, such as adding, editing, deleting and assigning roles to users, can only be performed by roles that have been granted the "**Can manage roles and users**" permission. Ensure that the role assigned to your account has this permission in order to access and manage user accounts. {% endhint %} ### Contents: 1. [Creating a new role](#creating-a-new-role) 2. [Editing an existing role](#editing-an-existing-role) 3. [Find the role](#find-the-role) 4. [Defining role permissions](#defining-role-permissions) ### Creating a new role To create a new role with customized access permissions, follow these steps: 1. Access the "**Roles**" page from the "**Users and Roles**" tab. 2. Look for the "**+ Role**" and click on it. 3. Provide a descriptive name for the new role to reflect its purpose or responsibilities. 4. Define the desired access permissions for the role by selecting the appropriate checkboxes [options](#defining-role-permissions). 5. Consider the specific *product types* or individual *product* that should be accessible to users assigned to this role. 6. Save the new role by clicking "**Create**" to add it to the list of available roles in the AppSec Portal.

{% hint style="info" %} Please note that the value of "***Product type***" takes precedence over the value of "***Product***". If any values are selected for the "**Has access to products with types**" section in the role settings, users with that role will see all products with the chosen type, regardless of the values specified in the "**Has access to products**" section

{% endhint %} ### Editing an existing role To modify the access permissions or details of an existing role, follow these steps: 1. Access the "**Roles**" page from the "**Users and Roles**" tab. 2. Locate the role you want to edit from the list of available roles. 3. Select the role to view its details and permissions. 4. Make the necessary changes to the role's name or access permissions by selecting or deselecting options. 5. Delete the role if necessarily by pressing "**Delete**" button.

### Find the role To find the specific role you're interested in, please use the search function.

### Defining role permissions When creating or editing a role, it is important to carefully consider the access permissions required for the role. Each permission determines the level of access and control a user with that role will have within the AppSec Portal. Evaluate the specific functionalities and data that should be accessible to users assigned to the role and select the appropriate permissions accordingly.

Permission level	Rule visibility	Rule editing	Adding/removing affected products from rules
No access (no available product types/products affecting this rule for the role)	Rule is hidden	N/A	N/A
Partial access (at least one product in this rule is available for the role)	Rule is viewable	Restricted	Allowed (only products that are specifically assigned to the role)
Full access (all products in a rule are available for the role)	Rule is viewable	Allowed	Allowed