<commit_before>---
sidebar: apim_sidebar
permalink: apim_adminguide_roles_and_permissions.html
folder: apim/user-guide/admin
description: Gravitee.io API Management - Admin Guide - Roles and Permissions
keywords: Gravitee.io, API Platform, API Management, API Gateway, oauth2, openid, documentation, manual, guide, reference, api
---

[[gravitee-admin-guide]]
= Roles and Permissions

Gravitee.io APIM allows you to create custom user roles to fit your needs.
A role is a group of permissions and it has a scope.
Roles defines what you can do with the UI and also with the REST API.

Let begin with some vocabulary.

== Glossary
=== Scope
When you log in Gravitee.io APIM, you are redirecting to the portal part of the webui.
What you can do on those screens are driven by your role for the scope `PORTAL`.

If you select an element on your user menu, you are redirected to the management part of the webui.
What you can do on those screens are dirven by your role for the scope `MANAGEMENT`.

*A user as only one `MANAGEMENT` role and one `PORTAL` role.*<commit_msg>Typo in Scope section<commit_after>---
sidebar: apim_sidebar
permalink: apim_adminguide_roles_and_permissions.html
folder: apim/user-guide/admin
description: Gravitee.io API Management - Admin Guide - Roles and Permissions
keywords: Gravitee.io, API Platform, API Management, API Gateway, oauth2, openid, documentation, manual, guide, reference, api
---

[[gravitee-admin-guide]]
= Roles and Permissions

Gravitee.io APIM allows you to create custom user roles to fit your needs.
A role is a group of permissions and it has a scope.
Roles defines what you can do with the UI and also with the REST API.

Let begin with some vocabulary.

== Glossary
=== Scope
When you log in Gravitee.io APIM, you are redirecting to the portal part of the webui.
What you can do on those screens are driven by your role for the scope `PORTAL`.

If you select an element on your user menu, you are redirected to the management part of the webui.
What you can do on those screens are driven by your role for the scope `MANAGEMENT`.

*A user as only one `MANAGEMENT` role and one `PORTAL` role.*
{'fraction_non_alphanumeric': 0.06255835667600373, 'fraction_numerical': 0.0009337068160597573, 'mean_word_length': 4.3575, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7660373', 'n_tokens_mistral': 641, 'n_tokens_neox': 624, 'n_words': 322}