> For the complete documentation index, see [llms.txt](https://docs.aquilax.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.aquilax.ai/user-manual/roles.md).

# Roles

AquilaX platform is using access roles and grouping by organization in order to authorize and control every API request

Each user may have access to any organization governed by the below access control list :

<table><thead><tr><th width="284">Operation</th><th width="178" data-type="checkbox">Security Manager</th><th width="178" data-type="checkbox">Security Engineer</th><th data-type="checkbox">Developer</th></tr></thead><tbody><tr><td>Delete Org</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Update Org</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Add Members (exclude owner)</td><td>true</td><td>false</td><td>false</td></tr><tr><td>Update Billing</td><td>false</td><td>false</td><td>false</td></tr><tr><td>Start Scan</td><td>true</td><td>true</td><td>true</td></tr><tr><td>Delete Scan</td><td>true</td><td>true</td><td>false</td></tr><tr><td>Create Group</td><td>true</td><td>true</td><td>true</td></tr><tr><td>Update Group</td><td>true</td><td>true</td><td>true</td></tr><tr><td>Delete Group</td><td>true</td><td>true</td><td>true</td></tr><tr><td>Update Policy (org level)</td><td>true</td><td>false</td><td>false</td></tr><tr><td>Update Policy (group level)</td><td>true</td><td>true</td><td>false</td></tr><tr><td>Update Policy (project level)</td><td>true</td><td>true</td><td>true</td></tr></tbody></table>

{% hint style="info" %}
Owner have access to all the operation for any resource within the organization that he is owner
{% endhint %}

{% hint style="warning" %}
Viewer have read only access to all the resources. Usualy this role is assigned to auditor and someone that have to review the output only
{% endhint %}