> For the complete documentation index, see [llms.txt](https://yudu-sentinel.gitbook.io/sentinel-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://yudu-sentinel.gitbook.io/sentinel-documentation/system-administration/permissions.md).

# Permissions

Manage Access Control

Access to the Sentinel system is controlled by access permissions. 

Permissions can be assigned to users via 2 methods:

[Direct Permissions](/sentinel-documentation/system-administration/permissions/direct-permissions.md) - Assigned directly to the user as required.

[Permission Groups](/sentinel-documentation/system-administration/permissions/permission-groups.md) - A collection of permissions that a user is a member of.

### Permission List

The permissions available can be categorised into 3 types. 

**System Administration** - High level admin permissions for managing the system

**User Abilities** - Per user abilities across the system

**Space Permissions** - Permissions which give user access to features within their assigned spaces.

#### System Administration

{% hint style="danger" %}
Follow the **principle of least privilege** and grant only the minimum permissions needed.

It is advised to assign System Administration level permissions sparingly.
{% endhint %}

| **System Administrator** | Full system administration via Console |
| ------------------------ | -------------------------------------- |
| **Document Manager**     | Publish and manage DRM documents       |
| **API Administrator**    | Full system administration via API     |
| **People Manager**       | Manage system users and contacts       |

***

#### User Abilities

| **View Private Fields** | See private fields in App directory       |
| ----------------------- | ----------------------------------------- |
| **Console Access**      | Basic console access                      |
| **Manage Profile**      | Ability to update own profile information |

***

### Space Permissions

{% hint style="warning" %}
Space Permissions assigned to a system user will apply to all of their assigned Spaces.
{% endhint %}

| **Manage Groups**               | Manage groups and assign Users, Contacts and Documents |
| ------------------------------- | ------------------------------------------------------ |
| **Manage Broadcasts**           | Create and send system broadcasts                      |
| **Send Prepared Broadcasts**    | List and trigger prepared broadcasts                   |
| **Manage Conferences**          | Manage video conferences                               |
| **Hotline Access**              | Access to Hotline                                      |
| **Hotline Administrator**       | Create, manage and assign hotline access               |
| **Alertline Access**            | Create and manage Alertlines                           |
| **Chat Channels Administrator** | Create and manage Chat Channels                        |