# Manage roles

> Assign roles to users within a CloudBolt Platform organization

---

Site [llms.txt](/llms.txt)

---

The CloudBolt Platform provides a **role-based access control** (RBAC) model to manage user privileges within each organization. Roles determine available components and actions, enabling fine-grained control across cloud cost, operations, and user management workflows. Users can have different roles in different organizations, but only one role per organization.

## Permissions

Roles in the CloudBolt Platform consist of **permissions** that define the allowed actions. Permissions are granted at three hierarchical levels:

| Level | Description |
| --- | --- |
| Owner | Full access: create, read, update, and delete resources. |
| Editor | Read and update access: cannot create or delete resources. |
| Viewer | Read-only access to resources. |

<div class="alert alert-info" role="alert">


Permissions are not assigned directly to users. Users receive permissions through assigned **roles**.
</div>


## Roles

The CloudBolt Platform has four predefined roles, each designed to support a different persona within a FinOps organization:

| Role | Description |
| --- | --- |
| Admin | Full administrative access, including user and organization management capabilities. |
| Operations | Full control over cloud provider management. No access to cost data. |
| Practitioner | Full access to dashboards and cost reporting. |
| Stakeholder | View-only access to dashboards and cost reports. |

For a full breakdown of which specific pages and settings each role can access, see [Roles and permissions](/docs/cbp/getting-started/manage-organizations-users-roles/roles-and-permissions/).

## Change a user's role

To change the role for a user in a CloudBolt Platform organization:

1. Log in to the CloudBolt Platform as a user with the **Owner** permission. The address depends on where your organization's tenant is hosted; see [Sign in](/docs/cbp/getting-started/#sign-in).
1. Select **Settings** in the lower-left corner.
1. In the Settings menu, select **User Management**.

   ![Screenshot of the CloudBolt Platform Settings menu with the User Management option highlighted.](/img/cbp/getting-started/manage-organizations-users-roles/roles/user-management.png)
1. Locate a user by navigating the list or typing a name or email address into the search box.
1. Select within the box containing the current role in the row for the user.
1. From the role drop-down menu, select an appropriate role. Options: **Admin**, **Operations**, **Practitioner**, **Stakeholder**. A pop-up confirms the change.