---
title: "Role-Based Access Control (RBAC)"
url: "https://docs.indusface.com/en/article/role-based-access-control-rbac"
language: "en"
last_updated: "2026-07-01T10:16:18.295Z"
---

# Role-Based Access Control (RBAC)

AppTrana’s Role-Based Access Control (RBAC) is designed to help enterprises securely manage user access across large organizations. As teams grow and responsibilities become more segmented, the need for granular control over what each user can view or modify becomes critical.

RBAC empowers **Customer Admins** to define access based on users’ job functions, ensuring that only the right people have access to the right information, reducing both operational risks and potential security exposures.

## Preconfigured Roles in AppTrana

By default, AppTrana supports three roles, each with different access privileges:

| **Role** | **Scope** | **Access Rights** |
| --- | --- | --- |
| Customer Admin | Account-wide | Full access to all sites, can manage users, assign roles (including custom ones) |
| Website Admin | Assigned sites only | Can manage settings within assigned sites; cannot manage users or roles |
| Read-only User | Assigned sites only | Can only view data; cannot make any changes |

## What is New – Company Roles (Custom Roles)

To cater to more granular use cases, AppTrana now introduces **Custom Roles** (also known as **Company Roles**) which allow **Customer Admins** to:

-   Restrict access at the site and feature/tab level
-   Assign permissions as *Read/Write*, *Readonly*, or *Hidden* for each tab
-   Customize user access based on business roles (e.g., Risk Analyst, IT Engineer, Security Ops)

> Custom roles are **not available** for API-based authentication as of now.

## Custom Role Permissions – Feature Tab Matrix

| **Feature Tab** | **Configurable in Custom Roles?** | **Available Permission Options** |
| --- | --- | --- |
| Dashboard | No | Always visible |
| License & Utilization | No | Not visible to custom roles |
| Vulnerabilities | Yes | Read/Write /Readonly/ Hidden |
| Attacks | Yes | Read/Write /Readonly/ Hidden |
| Application Settings | No | Read/Write /Readonly/ Hidden |
| Bandwidth & Usage | Yes | Read/Write /Readonly/ Hidden |
| Reports | Yes | Read/Write /Readonly/ Hidden |

## How to create Custom roles (Role Based Access Control)

1.  Log in as **Customer Admin**

> Only users with the **Customer Admin** role can manage and assign roles.

2\.  Navigate to the **Settings** section

![](https://cdn-assets.productfruits.com/fdc041f3-20ab-4bd6-8558-5377b679b911)

3\. Click on "**Company Roles**" to manage roles.

![](https://cdn-assets.productfruits.com/7db050d0-cc24-4bea-9862-543488e48d2b)

This tab offers a centralized view for **Customer Admins** to manage all users and their assigned roles within the AppTrana portal.

![](https://cdn-assets.productfruits.com/23775308-1097-4ca7-afea-50285bc48767)

4\. Click **Create New Role**

![](https://cdn-assets.productfruits.com/b02e5a9f-7974-4a30-9bf3-82a5fc117c4a)

5\. Enter the **Role Name**

![](https://cdn-assets.productfruits.com/546a6b6e-ac70-475f-8a01-30dfc646ec2a)

> By default, **custom roles start with Read-Only access** to all configurable tabs.

![](https://cdn-assets.productfruits.com/1e649e9a-3e0f-4c64-b11d-f0f7fbec2e94)

6\. Adjust permissions per tab when creating or editing a custom role.

![](https://cdn-assets.productfruits.com/e22cbc3a-5a33-4fad-890b-e5d2d3079305)

| **Role** | **Description** |
| --- | --- |
| Read Only | View Only |
| Read/Write | View and perform actions |
| Hidden | Tab is not visible to the user |

7\. Click **Save**

![](https://cdn-assets.productfruits.com/0a0b4fe0-0635-4e9f-beab-d66139a0ffc2)

> You can create up to **5 custom roles** per account.

![](https://cdn-assets.productfruits.com/11d2eee5-c3ad-4f11-9d25-5f216035c852)

### How to Edit or Delete a Role

-   To modify an existing custom role, click **Edit** and adjust tab access.

![](https://cdn-assets.productfruits.com/12e40191-e98d-4e2d-aff2-72e989ae7f8c)

-   To remove a role, click **Delete**.

![](https://cdn-assets.productfruits.com/9efbc638-40ad-448e-9068-b21e524556bc)

-   Click **yes** to process

![](https://cdn-assets.productfruits.com/61a63bfc-f64c-4034-b0ab-ff7c87685d68)

## How to Assign Role to a User

1.  Navigate to **Company Users**

The **Company Users** tab provides a centralized view of all users associated with your AppTrana account. From this tab, Customer Admins can view user details, assign or update roles, and manage user access.

![](https://cdn-assets.productfruits.com/d7321c45-65fb-4648-b1bb-bc7f05333a70)

2\. To assign role, click **Edit** next to the user you want to modify

![](https://cdn-assets.productfruits.com/1c6b243c-6289-46e8-8ede-0362a2631adb)

3\. A pop-up window appears. Enter/edit user details:

-   First Name
-   Last Name
-   Business Email
-   Company Phone Number
-   Optionally enable 2FA for the user

![](https://cdn-assets.productfruits.com/5bfbf97a-b4a5-438d-8692-24b6323d9b43)

4\. Click **Next**

### Assign Role per Site or Group

In the next screen:

5\. Use the **search bar** to find onboarded sites

![](https://cdn-assets.productfruits.com/8c4c09d0-13c2-426b-9654-53f6c0eba4f4)

6\. Assign access on a **site-by-site** or **group basis**

7\. Select the role you want to assign: either **preconfigured** or **custom**

![](https://cdn-assets.productfruits.com/a8f71df0-23b5-40f2-8dda-7ebeeff56ca0)

**8**. Click **Save**

The user has been given a custom role with limited permissions.

![](https://cdn-assets.productfruits.com/6716711a-008d-45f5-a77a-263fec9b6c58)

> Users can have **mixed roles**. For example, they could be Website Admin for Site A and a Custom Role user for Site B.

## Role-Based Access Control in Action

Customer Admin - Assign Custom Role and Site Access

[Embedded content](https://app.storylane.io/demo/jgktriniv9pu?embed=inline)

Cybersecurity Analyst – Limited Module Access

[Embedded content](https://app.storylane.io/demo/7mhwnx9vkuof?embed=inline)