# Permissions

In Connectware, permissions are specific access rights to resources. Permissions allow administrators to define who can access which resources and what actions they can perform. Each permission represents a specific access right to a resource, whether it is an MQTT topic or an HTTP endpoint, with clearly defined read and/or write capabilities.

Understanding permissions is crucial for:

* **Security**: Implementing the principle of least privilege across your system.
* **Granularity**: Defining access control at a highly detailed level when necessary.
* **Transparency**: Clearly seeing who has access to specific resources.
* **Compliance**: Meeting regulatory requirements for data access control.

## Configuring Permissions

You can manage permissions via [roles](/2-1-2/documentation/user-management/roles.md).

## Permissions View

The **Permissions View** provides a comprehensive overview of all permissions configured in your Connectware environment. This centralized dashboard shows each permission's details, including:

The resource path it controls access to:

* The type of permission (MQTT or HTTP)
* The access level granted (read, write, or both)
* Which users and roles have this permission assigned

This view is particularly valuable for auditing your system's security posture and for troubleshooting access issues that users might encounter.

* To open the **Permissions View**, click **User** in the navigation panel, then click the **Permissions** tab.

<figure><img src="/files/Q6CddS2ZvAorAfSoxhm3" alt="Permissions overview"><figcaption><p>Permissions overview</p></figcaption></figure>

## Permission Details

While permissions cannot be edited directly from the Permissions View, you can access detailed information about any permission by clicking on it. This information is valuable for understanding exactly what access a permission grants and which users and roles are affected by it.

When you click on a permission in the **Permissions View**, the **Permission Details** dialog opens, showing:

* The permission's complete resource path
* The permission type (MQTT or HTTP)
* The access level (read, write, or both)
* All users who have this permission directly assigned
* All roles that include this permission

<figure><img src="/files/c2Dzr9d26PKpvHxb7J8r" alt="Permission Details dialog"><figcaption><p>Permission Details dialog</p></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cybus.io/2-1-2/documentation/user-management/permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
