# Configuring RBAC

> Source: https://docs.synthesized.io/tdk/latest/user_guide/060_security_compliance/rbac/role_based_access_control
> For the complete documentation index, see [llms.txt](https://docs.synthesized.io/llms.txt).

Step-by-step guide to configuring role-based access control in the platform.

## Prerequisites

- Admin access to the platform
- Users created (local or SSO)
- Projects defined

## Assigning Roles

### Via Web UI

1. Navigate to **Settings** → **Users**
2. Select user
3. Click **Edit**
4. Choose role from dropdown
5. Click **Save**

### Via API

```shell
curl -X PUT http://localhost:8080/api/users/{userId}/role \
  -H "Content-Type: application/json" \
  -d '{"role": "USER"}'
```

## Role Permissions

   
| Action | Admin | User | Viewer |
| --- | --- | --- | --- |
| 
View workflows

 | 

✓

 | 

✓

 | 

✓

 |
| 

Create workflows

 | 

✓

 | 

✓

 | 

✗

 |
| 

Execute workflows

 | 

✓

 | 

✓

 | 

✗

 |
| 

Delete workflows

 | 

✓

 | 

✓

 | 

✗

 |
| 

Manage users

 | 

✓

 | 

✗

 | 

✗

 |
| 

Manage projects

 | 

✓

 | 

✗

 | 

✗

 |
| 

View audit logs

 | 

✓

 | 

✗

 | 

✗

 |

## Automatic Role Assignment via Identity Provider

When [SAML group-to-role mapping](https://docs.synthesized.io/tdk/latest/user_guide/060_security_compliance/authentication/sso#_saml_group_to_role_mapping) or [LDAP authorities](https://docs.synthesized.io/tdk/latest/user_guide/060_security_compliance/authentication/ldap_activedirectory#authorities) are enabled, roles are assigned automatically based on the user’s group memberships in the identity provider. In this mode, role assignment in the UI and API is read-only — roles are updated on each login.

## Project Assignment

Assign users to projects:

1. Navigate to **Settings** → **Projects**
2. Select project
3. Click **Add Member**
4. Select user and role
5. Click **Add**

## See Also

- [Managing Projects](https://docs.synthesized.io/tdk/latest/user_guide/060_security_compliance/rbac/projects)
- [Users and Groups](https://docs.synthesized.io/tdk/latest/user_guide/060_security_compliance/rbac/users_and_groups)
- [SSO Integration](https://docs.synthesized.io/tdk/latest/user_guide/060_security_compliance/authentication/sso)