# Role Based Access Control (RBAC) Role Based access control (RBAC) streamlines permissions to various resources within the Nightfall console. There are two key components of RBAC within Nightfall - roles and permissions. A role is a collection of pre-defined permissions that can be assigned to user accounts within Nightfall. Default roles cannot be edited. A role can be assigned to more than one user account whereas an user account can only have one role. Permissions refer to the specific create, read, update, and delete actions you can take on resources such as policies, events, apps, etc within Nightfall. ## Accessing the Users and Roles Page To access the Users and Roles page: 1. Click **Settings** from the left menu.
2. Click the **Users & roles** tab.
You can view the list of Users and the roles assigned to each user.
Click the **Roles** tab to access the Roles page.
The Roles page displays the Role name, Permissions assigned to a role and the number of users to whom the role is assigned, as shown in the following image.
You can click the **View permission details** button to expand the complete list of permissions associated with a Role.
{% hint style="warning" %} Currently, you can assign only a maximum of one role to a user. Also, you cannot create custom Roles and must use the out of the box Roles provided by Nightfall. {% endhint %} ## Roles and Permissions Nightfall provides you with five Roles. Each of the five Roles is associated with multiple permissions. The following table lists each role and the permissions associated with the Role. | Role | Permissions | | --------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Security Analyst |
  1. Exfiltration Events
  2. Content Preview
  3. Dashboard
  4. Detectors
  5. DLP Violations
  6. Reporting
  7. Encryption Events
| | Policy Manager |
  1. App Alert Management
  2. Detectors
  3. DLP Policies
  4. Detection Rules
  5. App Management
  6. Exfiltration/Posture Policies
  7. Encryption Polices
| | Security Events Manager |
  1. Exfiltration Events
  2. Content Preview
  3. Dashboard
  4. Detectors
  5. DLP Violations
  6. Reporting
  7. Encryption Events
| | Security Operations Manager |
  1. Exfiltration Events
  2. Content Preview
  3. Detection Rules
  4. Dashboard
  5. Encryption events
  6. Detectors
  7. DLP Policies
  8. DLP Violations
  9. App Alert Management
  10. Reporting
  11. Encryption policies
  12. App Management
  13. Exfiltration/Posture Policies
| | System Administrator |
  1. Billing
  2. Exfiltration Events
  3. Content Preview
  4. Detection Rules
  5. User Management
  6. Dashboard
  7. Encryption events
  8. Detectors
  9. DLP Policies
  10. Alert Service
  11. DLP Violations
  12. App Alert Management
  13. Directory Sync
  14. Reporting
  15. Encryption Policies
  16. App Management
  17. Exfiltration/Posture Policies
  18. API Keys
| You can learn more about each of the role from the following links. [Security Analyst Role](/nightfall_settings/role_based_access_control/security_analyst.md) [Policy Manager Role](/nightfall_settings/role_based_access_control/policy_manager.md) [Security Events Manager Role](/nightfall_settings/role_based_access_control/security_events_manager.md) [Security Operations Manager Role](/nightfall_settings/role_based_access_control/security_operations_manager.md) [System Administrator Role](/nightfall_settings/role_based_access_control/system_administrator.md) --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://help.nightfall.ai/nightfall_settings/role_based_access_control.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.