# Permissions
In Connectware, permissions are specific access rights to resources. Permissions allow administrators to define who can access which resources and what actions they can perform. Each permission represents a specific access right to a resource, whether it is an MQTT topic or an HTTP endpoint, with clearly defined read and/or write capabilities.
Understanding permissions is crucial for:
* **Security**: Implementing the principle of least privilege across your system.
* **Granularity**: Defining access control at a highly detailed level when necessary.
* **Transparency**: Clearly seeing who has access to specific resources.
* **Compliance**: Meeting regulatory requirements for data access control.
## Configuring Permissions
You can manage permissions via [roles](https://docs.cybus.io/2-0-6/documentation/user-management/roles).
## Permissions View
The **Permissions View** provides a comprehensive overview of all permissions configured in your Connectware environment. This centralized dashboard shows each permission's details, including:
The resource path it controls access to:
* The type of permission (MQTT or HTTP)
* The access level granted (read, write, or both)
* Which users and roles have this permission assigned
This view is particularly valuable for auditing your system's security posture and for troubleshooting access issues that users might encounter.
* To open the **Permissions View**, click **User** in the navigation panel, then click the **Permissions** tab.
Permissions overview
## Permission Details
While permissions cannot be edited directly from the Permissions View, you can access detailed information about any permission by clicking on it. This information is valuable for understanding exactly what access a permission grants and which users and roles are affected by it.
When you click on a permission in the **Permissions View**, the **Permission Details** dialog opens, showing:
* The permission's complete resource path
* The permission type (MQTT or HTTP)
* The access level (read, write, or both)
* All users who have this permission directly assigned
* All roles that include this permission
