---
title: "Access Management"
component: "savanna"
version: "main"
module: "administration"
html_url: "/savanna/main/administration/how2-access-mgnt.html"
---

[View as HTML](/savanna/main/administration/how2-access-mgnt.html) · [Documentation index](/llms.txt)

# Access Management

As an organization administrator, you can define permissions for users, controlling their level of access to workspaces, workgroup and features. This allows you to ensure data security and enforce access control policies within your organization. In TigerGraph Savanna, access management allows you to configure permissions at both the **Resource** level and the **User** level.

## Resource Level

At the resource level, you can configure permissions that apply to specific workspaces within your TigerGraph Savanna organization. Resource-level permissions determine what actions a user can perform on a specific resource.

> [!NOTE]
> These permissions allow you to control access to individual resources based on the needs and responsibilities of different users.

You can go to [How to Manage Workgroup and Workspace Permissions](../workgroup-workspace/workgroups/how2-workgroup-access.md) to manage access at the resource level.

## User Level Permission

At the user level, you can define permissions that apply to individual users or groups of users. User-level permissions determine what actions a user can perform across your entire TigerGraph Savanna organization.

> [!NOTE]
> These permissions are typically related to administrative tasks and access to workgroups and workspaces.

## How to Manage User Permissions

To manage user permissions:

1. Click on a **User Name** from user list.  
![userlist](_images/userlist.png)  
![permissions select a user](_images/permissions-select%20a%20user.png)
2. You will now be able to see the **Permissions** on the **User Detail** panel of the selected user.  
![Screenshot 2024 04 28 at 4.24.00 PM](_images/Screenshot%202024-04-28%20at%204.24.00 PM.png)
3. Once you make a change to one of the dropdown menus. Select either the **Cancel** button to cancel the changes or the **Save** button to save the changes.  
![permissions saveorCancealchanges](_images/permissions_saveorCancealchanges.png)

## Permissions

Please refer to the following tables of the roles and permissions for the organization, workgroup, and workspace.

### Org Level Permissions

| Permission | Org Admin | Billing Admin | Billing Viewer | Workgroup Admin | Workspace Admin | Workspace Member |
| --- | --- | --- | --- | --- | --- | --- |
| Manage Organization | Yes | No | No | No | No | No |
| Manage Org Permission | Yes | No | No | No | No | No |
| Manage Billing | Yes | No | No | No | No | No |
| Invite new members to org | Yes | No | No | No | No | No |
| Manage access for the org | Yes | No | No | No | No | No |
| Create Workgroup | Yes | No | No | No | No | No |
| Configure Add-Ons | Yes | No | No | No | No | No |
| Manage Payment Methods | Yes | Yes | No | No | No | No |
| View Billing Information | Yes | Yes | Yes | No | No | No |

### Workgroup level Permissions

| Permission | Org Admin | Billing Admin | Billing Viewer | Workgroup Admin | Workspace Admin | Workspace Member |
| --- | --- | --- | --- | --- | --- | --- |
| Edit workgroup | Yes | No | No | Yes | No | No |
| Delete workgroup | Yes | No | No | No | No | No |
| Create new workspace within workgroup | Yes | No | No | Yes | No | No |
| Manage permissions for workgroup | Yes | No | No | Yes | No | No |

### Workspace level Permissions

| Permission | Org Admin | Billing Admin | Billing Viewer | Workgroup Admin | Workspace Admin | Workspace Member |
| --- | --- | --- | --- | --- | --- | --- |
| Edit workspace | Yes | No | No | Yes | Yes | No |
| Delete workspace | Yes | No | No | Yes | No | No |
| Manage permissions for workspace | Yes | No | No | Yes | Yes | No |
| Run GSQL Editor | Yes | No | No | Yes | Yes | Yes \* |
| Loading Data | Yes | No | No | Yes | Yes | Yes \* |
| Data Insights | Yes | No | No | Yes | Yes | Yes \* |
| Install Solutions | Yes | No | No | Yes | Yes | Yes \* |

> [!NOTE]
> `*` Additional database role(s) or permission(s) may need to be assigned to the user for certain actions.

## Next Steps

Next, learn about [Organization Management](settings/how2-use-organization-mgnt.md)or continue on to learn about [Security](security/index.md) or additional [Resources](../resources/index.md) in TigerGraph Savanna.

Return to the [Overview](../overview/index.md) page for a different topic.