> For the complete documentation index, see [llms.txt](https://docs.codemash.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.codemash.io/cloud/membership/roles.md).

# Roles

A **role** bundles one or more policies and is assigned to users to control what they can do — this is Norbix's role-based access control (RBAC). Roles are project-scoped: `content-editor` in one project does not exist in another.

<figure><img src="/files/DSHVVsLPutZ1VS1XRTcY" alt=""><figcaption><p>Membership → Roles.</p></figcaption></figure>

## What you can do here

The list shows each role's **Role Name**, its **Type** (System or Custom), and how many **Policies** it carries. **Add New** opens the [create screen](/cloud/membership/roles/new.md); clicking a role opens the [edit screen](/cloud/membership/roles/edit.md), where you change its description and attached policies. System (built-in) roles are shown read-only and cannot be deleted. Assign roles to users on the **Users** screen.

A practical pattern: keep roles few and human-readable (`admin`, `editor`, `member`) and put the fine-grained permissions into policies.

## Use it from code

[Membership → Roles](/sdks-and-cli/membership/roles.md).

## API reference

Endpoints: [Membership → Roles](/api-reference/membership/roles.md).