https://docs.protegrity.com/aiteam-edition/docs/gov_policy/pmg/add_info/Recent content in Additional Information onHugoenhttps://docs.protegrity.com/aiteam-edition/docs/gov_policy/pmg/add_info/pmg_roles_permissions/Mon, 01 Jan 0001 00:00:00 +0000https://docs.protegrity.com/aiteam-edition/docs/gov_policy/pmg/add_info/pmg_roles_permissions/<p>Roles are templates that include permissions and users can be assigned to one or more roles. All users in the appliance must be associated with a role.</p> <p>The roles packaged with Policy Workbench are as follows:</p> <table> <thead> <tr> <th>Roles</th> <th>Description</th> <th>Permissions</th> </tr> </thead> <tbody> <tr> <td>workbench_administrator</td> <td>Full administrative access to workbench.</td> <td>workbench_management_policy_write, workbench_deployment_immutablepackage_export, workbench_deployment_certificate_export</td> </tr> <tr> <td>workbench_viewer</td> <td>Read-only access to workbench.</td> <td>workbench_management_policy_read</td> </tr> <tr> <td>workbench_deployment_administrator</td> <td>Administrative access to workbench deployments.</td> <td>workbench_deployment_immutablepackage_export, workbench_deployment_certificate_export</td> </tr> </tbody> </table> <p>The capabilities of a role are defined by the permissions attached to the role. Though roles can be created, modified, or deleted from the appliance, permissions cannot be edited. The permissions that are available to map with a user and packaged with Policy Workbench as default permissions are as follows:</p>