> This page is for Applications Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.humansecurity.com/llms.txt.

# Role permissions

You can view role permissions as well as create new roles from your **Platform settings.** Role permissions are split by product. Your account comes with default roles and permissions, which are listed in this article.

## Prerequisites

To create and manage **custom roles,** you need to be at least an **IT/Devops Platform** role

## Create a custom role

If the default roles don’t meet your account’s needs, you can create **custom roles** with the permissions you’d like.

1. Navigate to **Platform settings > Permissions.**
2. Select the **product** you want to create a role for.
3. Select **+ Create role**.

![A list of default roles and the Create role button highlighted](/_fern-img/2fc154bb4e7652937fd4340c4f2c24448bd1d76661e70684a2fa92e2f0181bc1.webp)

4. Enter a **name** for your role and select an **existing role** to base the permissions off of. Then, click **Start.**
5. Select each permission you’d like to enable or disable for this role.
6. Click **Save changes.**

Your new role will appear under **Custom roles.** You can always **edit** or **delete** a role by hovering over it and selecting the corresponding option  .

## Enable an advanced role

Advanced roles are specialized roles designed for organizations that need more granular user controls beyond the default ones. Advanced roles need to be enabled per product.

> **Note**
>
> Advanced roles are not available for all products.

1. Navigate to **Platform settings > Permissions.**
2. Select the **product** you want to enable advanced roles on.
3. Toggle on **Advanced roles.**

![Advanced role toggle highlighted](/_fern-img/79a88b191e0d41e8633ec03e0fc770bd9de70907a86f028f8e7e833377ead7a7.webp)

4. Confirm that you want to show advanced roles in the popup that appears.

Now, any available advanced roles will appear, and you can assign users those advanced roles. You can also create custom roles based on the advanced ones.

## Default role permissions

The following are the default roles and their permissions HUMAN assigns by default per product.

### Account Defender

| Name                                            | Permissions                                                                                                                                                                                                                                                                                                                 |
| ----------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Viewer** Explore and investigate data         | * View **Explore > Dashboard** and **Investigation**
* View rules **Policies > Policy Rules**
* View lists in **Policies > List Management**
* View actions in **Settings > Action Settings**                                                                                                                               |
| **Admin** Full access to all settings and pages | - View **Explore > Dashboard**and **Investigation**
- Update an **Account status**
- View **Explore > Business Insights**
- View and manage rules **Policies > Policy Rules**
- View and manage lists in **Policies > List Management**
- View and manage actions in **Settings > Action Settings**
- Export data into CSVs |

### Bot Defender

| Name                                               | Permissions                                                                                                                                                                                                                                                                                                                                                                         |
| -------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Viewer** Explore and investigate data            | * View **Explore > Dashboards, Investigation**, and **Reports**
* View **Policies > Overview**and **Policy Settings**
* View **Settings > Product Settings, Precheck Settings,** and **Data > Configuration**                                                                                                                                                                       |
| **Developer** View data and customize integrations | - View **Explore > Dashboards, Investigation**, and **Reports**
- View **Policies > Overview** and **Policy Settings**
- View **Settings > Product Settings, Precheck Settings,** and **Data > Configuration**
- Developer and integration capabilities                                                                                                                             |
| **Analyst** Explore, investigate, and manage data  | * View and manage **Explore > Dashboards, Investigation**, and **Reports**
* Exonerate users
* View and manage **Policies > Overview** and **Policy Settings**
* View **Settings > Product Settings, Precheck Settings,** and **Data > Configuration**
* Developer and integration capabilities                                                                                     |
| **Admin** Full access to all settings and pages    | - View and manage **Explore > Dashboards, Investigation**, and **Reports**
- Exonerate users
- Activate or disable an application
- View and manage **Policies > Overview** and **Policy Settings**
- View and manage **Settings > Product Settings, Precheck Settings,** and **Data > Configuration**
- Configure and manage data exports
- Developer and integration capabilities |

### Code Defender

| Name                                                          | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| ------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Viewer** Explore and investigate data                       | * View **scripts, incidents,** and **actions**
* View **reports** and **audits**
* View **vendors**
* View **policy rules**
* View **PCI DSS data**
* View **system settings**                                                                                                                                                                                                                                                                       |
| **Developer** View data and customize integrations            | - View and manage **scripts, incidents,** and **actions**
- View **reports** and **audits**
- View and manage **vendors**
- View **integrations**
- View **notification settings**
- View **policy rules**
- Manage **Client-side Defense policy rules**
- Manage **PCI-DSS policy rules**
- View **PCI DSS data**
- Manage **PCI DSS justification**
- Manage **PCI DSS authorization**
- View **system settings**                                  |
| **Admin** Full access to all settings and pages               | * View and manage **scripts, incidents,** and **actions**
* View **reports** and **audits**
* View and manage **vendors**
* View and manage **integrations**
* View and manage **notification settings**
* View **policy rules**
* Manage **Client-side Defense policy rules**
* Manage **PCI DSS policy rules**
* View **PCI DSS data**
* Manage **PCI DSS justification**
* Manage **PCI DSS authorization**
* View and manage **system settings** |
| **PCI Justifier (advanced role)** View and justify scripts    | For large enterprises requiring two separate reviewers (an Authorizer and a Justifier) for PCI DSS scripts.* View and manage **scripts, incidents**, and **actions**
* View **reports** and **audits**
* View and manage **vendors**
* View **integrations**
* View **notification settings**
* View **policy rules**
* View **PCI DSS data**
* Manage **PCI DSS justification**
* View **system settings**                                          |
| **PCI Authorizer (advanced role)** View and authorize scripts | For large enterprises requiring two separate reviewers (an Authorizer and a Justifier) for PCI DSS scripts.* View and manage **scripts, incidents**, and **actions**
* View **reports** and **audits**
* View and manage **vendors**
* View **integrations**
* View **notification settings**
* View **policy rules**
* View **PCI DSS data**
* Manage **PCI DSS authorization**
* View **system settings**                                          |

### Credential Intelligence

| Name                                    | Permissions                                |
| --------------------------------------- | ------------------------------------------ |
| **Viewer** Explore and investigate data | * View **Dashboard** and **Investigation** |

### Sightline Cyberfraud Defense

| Name                                               | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| -------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Viewer** Explore and investigate data            | * View **Overview**
* View **Explore > Traffic, Accounts, Reports**, and **Custom Dashboards**
* View **Investigate > Account Takeover, Fake Accounts,** and **Traffic Analyzer**.
* View **Policies > Policy Overview, Policy Settings, Account Policies,** and **Policy Lists**.
* View **Settings > Mitigation** and **Data Export**                                                                                                                                                                                                                              |
| **Developer** View data and customize integrations | - View **Overview**
- View **Explore > Traffic, Accounts, Reports**, and **Custom Dashboards**
- View **Policies > Traffic Policy Overview** and **Traffic Policy Settings**
- View and manage **Policies > Account Policies** and **List Management**
- View **Settings > Mitigation Settings > Challenge Settings** and **Precheck Settings** and **Settings > Data Export**
- View and manage **Settings > Mitigation Settings > Custom Action Settings** and **Custom Action Overview**
- Update an **Account status**
- Developer and integration capabilities  |
| **Analyst** Explore, investigate, and manage data  | * View **Overview**
* View and manage **Explore > Traffic, Accounts, Reports**, and **Custom Dashboards**
* View and manage **Policies > Traffic Policy Overview, Traffic Policy Settings, Account Policies** and **List Management**
* View **Settings > Mitigation Settings > Challenge Settings** and **Precheck Settings** and **Settings > Data Export**
* View and manage **Settings > Mitigation Settings > Custom Action Settings** and **Custom Action Overview**
* Update an **Account status**
* Developer and integration capabilities
* Exonerate users |
| **Admin** Full access to all settings and pages    | - View **Overview**
- View and manage **Explore > Traffic, Accounts, Reports**, and **Custom Dashboards**
- View and manage **Policies > Traffic Policy Overview, Traffic Policy Settings, Account Policies** and **List Management**
- View and manage **Settings > Mitigation Settings** and **Data Export**
- Update an **Account status**
- Developer and integration capabilities
- Exonerate users
- Activate or disable an application
- Configure and manage data exports                                                                                    |

### Platforms

| Name                                              | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| ------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Viewer** Explore and investigate data           | * View **account information** in **Platform Settings > Account**
* View **users** in **Platform Settings > User management**
* View **roles** in **Platform Settings > Permissions**
* View **account usage history** in **Platform Settings > Usage**
* View **Enforcer configurations** in **Platform Settings > Enforcers**                                                                                                                                                                                                                                                                                        |
| **Application Owner** Manage application settings | - View and manage **account information** in **Platform Settings > Account**
- View **users** in **Platform Settings > User management**
- View **roles** in **Platform Settings > Permissions**
- Configure **SSO authentication methods** in **Platform Settings > Authentication**
- View **account usage history** in **Platform Settings > Usage**
- View and manage **page type mappings** in **Platform Settings > Page Type Mapping**
- View **Enforcer configurations** in **Platform Settings > Enforcers**                                                                                                  |
| **IT/Devops** Manage integrations                 | * View **account information** in **Platform Settings > Account**
* View and invite **users** in **Platform Settings > User management**
* View and manage **roles** in **Platform Settings > Permissions**
* Configure **SSO authentication methods** in **Platform Settings > Authentication**
* View and manage **integrations** in **Platform Settings > Integrations**
* View **Enforcer configurations** in **Platform Settings > Enforcers**                                                                                                                                                                    |
| **User manager** Manage user roles and access     | - View and invite **users** in **Platform Settings > User management**
- View and manage **roles** in **Platform Settings > Permissions**                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| **Admin** Full access to all settings and pages   | * View and manage **account information** in **Platform Settings > Account**
* View and invite **users** in **Platform Settings > User management**
* View and manage **roles** in **Platform Settings > Permissions**
* Configure **SSO authentication methods** in **Platform Settings > Authentication**
* View **account usage history** in **Platform Settings > Usage**
* View and manage **integrations** in **Platform Settings > Integrations**
* View and manage **page type mappings** in **Platform Settings > Page Type Mapping**
* View **Enforcer configurations** in **Platform Settings > Enforcers** |