# Access management

Snowray provides different types of roles that define which user is allowed to see a specific resource or to perform certain actions.

Roles are tied to resources, meaning that users can have different types of permissions to different resources. For example, a user might be able to maintain a resource but has only read access to others.

{% hint style="info" %}
Resources only appear for users who are granted *Read* access to them.
{% endhint %}

A more detailed description of user role permissions can be found below.

### User Roles and Permissions

<table data-header-hidden><thead><tr><th width="122"></th><th width="156" align="center"></th><th width="155" align="center"></th><th width="155" align="center"></th><th width="155" align="center"></th></tr></thead><tbody><tr><td></td><td align="center"><strong>Reader</strong></td><td align="center"><strong>Writer</strong></td><td align="center"><strong>Maintainer</strong></td><td align="center"><strong>Owner</strong></td></tr><tr><td><strong>Browse</strong></td><td align="center">Browse shared resources</td><td align="center">Browse shared resources</td><td align="center">Browse shared resources</td><td align="center">Browse shared resources</td></tr><tr><td><strong>Export</strong></td><td align="center">Export shared resources in any format</td><td align="center">Export shared resources in any format</td><td align="center">Export shared resources in any format</td><td align="center">Export shared resources in any format</td></tr><tr><td><strong>Edit</strong></td><td align="center"><img src="https://content.gitbook.com/content/rPmvkRL7jgReSYN2dCHS/blobs/LOP5KqRtOnqvYLmbQ69A/minus_sign" alt="" data-size="line"></td><td align="center">Edit shared resource content</td><td align="center">Edit shared resource metadata and content</td><td align="center">Edit shared resource metadata and content</td></tr><tr><td><strong>Release</strong></td><td align="center"><img src="https://content.gitbook.com/content/rPmvkRL7jgReSYN2dCHS/blobs/LOP5KqRtOnqvYLmbQ69A/minus_sign" alt="" data-size="line"></td><td align="center"><img src="https://content.gitbook.com/content/rPmvkRL7jgReSYN2dCHS/blobs/LOP5KqRtOnqvYLmbQ69A/minus_sign" alt="" data-size="line"></td><td align="center">Publish releases</td><td align="center"><p>Publish </p><p>releases</p></td></tr><tr><td><strong>Delete/</strong><br><strong>Retire</strong></td><td align="center"><img src="https://content.gitbook.com/content/rPmvkRL7jgReSYN2dCHS/blobs/LOP5KqRtOnqvYLmbQ69A/minus_sign" alt="" data-size="line"></td><td align="center"><img src="https://content.gitbook.com/content/rPmvkRL7jgReSYN2dCHS/blobs/LOP5KqRtOnqvYLmbQ69A/minus_sign" alt="" data-size="line"></td><td align="center">Delete or retire resources</td><td align="center">Delete or retire resources</td></tr><tr><td><strong>Share</strong></td><td align="center"><img src="https://content.gitbook.com/content/rPmvkRL7jgReSYN2dCHS/blobs/LOP5KqRtOnqvYLmbQ69A/minus_sign" alt="" data-size="line"></td><td align="center"><img src="https://content.gitbook.com/content/rPmvkRL7jgReSYN2dCHS/blobs/LOP5KqRtOnqvYLmbQ69A/minus_sign" alt="" data-size="line"></td><td align="center">Manage access of resources</td><td align="center">Manage access of resources</td></tr><tr><td><strong>Transfer</strong></td><td align="center"><img src="https://content.gitbook.com/content/rPmvkRL7jgReSYN2dCHS/blobs/LOP5KqRtOnqvYLmbQ69A/minus_sign" alt="" data-size="line"></td><td align="center"><img src="https://content.gitbook.com/content/rPmvkRL7jgReSYN2dCHS/blobs/LOP5KqRtOnqvYLmbQ69A/minus_sign" alt="" data-size="line"></td><td align="center"><img src="https://content.gitbook.com/content/rPmvkRL7jgReSYN2dCHS/blobs/LOP5KqRtOnqvYLmbQ69A/minus_sign" alt="" data-size="line"></td><td align="center">Transfer resource ownership</td></tr></tbody></table>

{% hint style="info" %}
When having multiple roles through Organization or Bundle access, the role with the higher accessibility feature will always be the one taken into consideration when trying to access a resource.
{% endhint %}

Maintainers can share resources, edit user roles, and revoke access to resources after visiting the ***Sharing*** tab of the selected resource. More can be found on these topics under the following pages:

{% content-ref url="access/sharing-resources" %}
[sharing-resources](https://docs.b2ihealthcare.com/snowray/v3.1/reference/resources/access/sharing-resources)
{% endcontent-ref %}

{% content-ref url="access/change-roles" %}
[change-roles](https://docs.b2ihealthcare.com/snowray/v3.1/reference/resources/access/change-roles)
{% endcontent-ref %}

{% content-ref url="access/revoke-access" %}
[revoke-access](https://docs.b2ihealthcare.com/snowray/v3.1/reference/resources/access/revoke-access)
{% endcontent-ref %}