---
title: "Understanding Roles"
slug: "understanding-roles"
updated: 2022-08-02T21:42:53Z
published: 2022-08-02T21:42:53Z
canonical: "kb.expedient.com/understanding-roles"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.expedient.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Understanding Roles

### RBAC roles

You can assign one of the following roles to a Spectrum user account.

#### Org Admin

a user with administrative privileges to an organization and all its instances, and the user management and authentication features in Spectrum

#### Admin

a user with administrative privileges to all the instances, and to create all types of users

#### Instance Manager

an instance-specific user with administrative, scoped, or read-only privileges to the instances (across One or more organizations) to which they are added

#### User Manager

an instance-specific user with privileges to only the user management features

#### Tech Support User

a ColorTokens or ColorTokens-certified, third-party Technical Support representative with administrative privileges to the instances (across One or more organizations) to which they are added

#### Read Only

a user with Read-only privileges for all the instances (across One or more organizations) to which they are added