---
title: "Roles and permissions"
description: "The roles in Curade, a platform role and a role in each tenant, what each one opens, what an admin does and how custom roles work."
url: https://curade.ai/en/curade/docs/administration/roles-and-permissions/
product: "Curade"
version: "3.0.0"
breadcrumbs:
  - "Curade docs"
  - "Administration"
  - "Roles and permissions"
---

# Roles and permissions

The roles in Curade, a platform role and a role in each tenant, what each one opens, what an admin does and how custom roles work.

Every account holds a platform role for Curade as a whole, and a role in each tenant it works in. They decide which tenants you see and what you can open and do in each.

## What each role opens

| Role | What it opens |
|---|---|
| **Platform Admin** | Every tenant with full access, needing no tenant role, and the users, tenants and roles across Curade |
| **Platform User** | Nothing on its own: only the tenants where they hold a tenant role |

In each tenant, the tenant role decides the rest:

| Area | **Tenant Admin** | **Tenant User** |
|---|---|---|
| Dashboards | Full access, with import and export | View |
| AI Agent, with CLEO | Full access | No access |
| Analytics, including capacity planning | Full access | View |
| Reports | Full access | View |
| Automation | Full access | No access |
| The tenant's details, sources and configuration | View and change | View |
| The tenant's roles | Full access | View |
| The tenant's users | View | View |

Whatever the role, a dashboard or a chat shows only to the people its visibility allows ([Dashboard](https://curade.ai/en/curade/docs/features/dashboard/#visibility), [CLEO](https://curade.ai/en/curade/docs/features/cleo/#chats)).

## What an admin does

A Platform Admin, under **Settings**:

- adds people in **User Management** and gives them their platform role and tenant roles ([Manage users](https://curade.ai/en/curade/docs/administration/managing-users/));
- adds and deletes tenants in **Tenant Management**, with their sources and members ([Manage tenants](https://curade.ai/en/curade/docs/administration/managing-tenants/));
- works in every tenant without needing a tenant role.

A Tenant Admin changes their own tenant's details, sources, configuration and roles, but cannot add or delete a tenant or give people their roles. Platform Admins do those.

## When something is out of reach

- A Tenant User who needs more in a tenant asks a Tenant Admin of that tenant.
- Anyone who needs an account, a role in another tenant or a new tenant asks a Platform Admin ([Get help](https://curade.ai/en/curade/docs/support/get-help/)).

## Custom roles

A custom role belongs to one tenant and holds exactly the permissions you pick. Each permission is one action on one area, such as `reporting:read`:

| Area | Actions |
|---|---|
| tenant | read, create, update, delete |
| user | read, create, update, delete |
| role | read, create, update, delete |
| dashboard | read, create, update, delete, import, export |
| analytics | read, create, update, delete |
| reporting | read, create, update, delete |
| automation | read, create, update, delete |
| ai agent | read, create, update, delete |

In **Tenant Management**, open the tenant with **Edit Tenant**, then select **New Role** under **Tenant Roles** to add one, or **Edit Permissions** to change one ([Manage tenants](https://curade.ai/en/curade/docs/administration/managing-tenants/)).