---
title: Permissions
id: "en:accounts:ROOT:permissions.adoc"
site: en
component: accounts
module: ROOT
version: 3.0
lang: en
url: "https://help.rtlscloud.io/en/accounts/3.0/permissions.html"
source_repo: "https://github.com/iot-invent/xCloud.git@3.0.x"
source_path: accounts/docs/en/modules/ROOT/pages/permissions.adoc
---

# Permissions

In this area, identities — users or [groups](groups.md) — are assigned roles. Which roles exist and what they cover is described under [Roles](roles.md).

> **IMPORTANT:** This list shows the permissions of the tenant only. The permissions of an individual space do not appear here; they are granted from the space list through the Permissions action.

## Permission list

![Permissions](_images/view/permissions.webp)

The user interface allows the management and overview of all granted permission profiles.

### Action bar

The icons above the table provide access to the basic management functions:

| Action | Description |
| --- | --- |
| ![refresh](_images/refresh.svg) **Refresh** | Reloads the list of permissions. |
| ![plus](_images/plus.svg) **Add** | Opens the dialog to create a new role assignment for a user or a group. |
| ![delete](_images/delete.svg) **Delete** | Permanently removes the selected permission assignment from the system (enabled after selection). |

> **TIP:** The table is sorted by Type by default. You can change the sorting at any time by clicking a different column header.

### Columns

This list shows all active role assignments.

| Column | Description |
| --- | --- |
| **Type** | Indicates whether the permission was assigned to an individual user or a group. A blue arrow marks the active sorting. |
| **Name** | The name of the respective user or group. |
| **Role** | The assigned functional role which defines the scope of the permissions. |
| **Granted** | An `X` marks a granted permission. An entry without the mark explicitly denies the right — it overrides a permission that would otherwise be inherited from a level above. |