---
title: "Managing roles in Sitecore Cloud Portal"
slug: "managing-roles-in-sitecore-cloud-portal"
abstract: "Provides an overview of roles and permissions in Sitecore CDP."
---
# Managing roles in Sitecore Cloud Portal

This topic helps you understand the roles in Sitecore Cloud Portal and the CDP entities that each role can access.

In [https://portal.sitecorecloud.io/](https://portal.sitecorecloud.io/), to invite team members and manage their access and permissions in CDP, you must have an *Organization Admin* or *Organization Owner* role in Sitecore Cloud Portal.

When inviting new team members to join a Sitecore Cloud Portal organization, an *Organization Admin* or *Organization Owner* can grant access to the CDP app and assign a specific app role, as shown here:

![Selecting a role when inviting a team member in Sitecore Cloud Portal](https://doc.sitecore.com/api/markdown-image/cdp/en/users/sitecore-cdp/images/cdpAppAccess.png)

For existing team members that already belong to the organization, an *Organization Admin* or *Organization Owner* can update their roles and permissions by [changing their app roles](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/manage-the-access-of-a-team-member.html#change-the-app-role-of-a-team-member) in Sitecore Cloud Portal.

This table describes the app roles and permissions in Sitecore Cloud Portal with respect to Sitecore CDP entities:

| App role | Description | Permissions |
| --- | --- | --- |
| **User** | A Sitecore Cloud Portal role that enables access to CDP entities that do not require an admin role. | <ul><li>Manage guest profile</li><li>Manage audience export</li><li>Batch segmentation</li><li>Data browser</li><li>Dashboards</li><li>Developer center entities</li><li>Manage company information</li><li>Manage points of sale</li><li>Access to [manage features](https://doc.sitecore.com/cdp/en/users/sitecore-cdp/managing-sitecore-cdp-system-settings/enable-features-in-sitecore-cdp.html)</li><li>Access to [enable or disable the debug feature](https://doc.sitecore.com/cdp/en/users/sitecore-cdp/managing-sitecore-cdp-system-settings/use-debug-mode-in-sitecore-cdp.html)</li></ul> |
| **Developer** | A Sitecore Cloud Portal role that provides additional permissions beyond the user role. | <ul><li>Manage guest profile</li><li>Manage audience export</li><li>Batch segmentation</li><li>Data browser</li><li>Dashboards</li><li>Developer center entities</li><li>View company information</li><li>Manage points of sale</li><li>Manage guests (delete)</li><li>View identity rules</li><li>Manage API access</li><li>View and create API keys</li><li>Edit and delete own API keys</li><li>Access to [manage features](https://doc.sitecore.com/cdp/en/users/sitecore-cdp/managing-sitecore-cdp-system-settings/enable-features-in-sitecore-cdp.html)</li><li>Access to [enable or disable the debug feature](https://doc.sitecore.com/cdp/en/users/sitecore-cdp/managing-sitecore-cdp-system-settings/use-debug-mode-in-sitecore-cdp.html)</li></ul> |
| **Admin** | A Sitecore Cloud Portal role that provides additional permissions beyond the user role. | <ul><li>Manage guest profile</li><li>Manage audience export</li><li>Enable and disable downloading the output of audience exports</li><li>Batch segmentation</li><li>Data browser</li><li>Dashboards</li><li>Developer center entities</li><li>Manage company information</li><li>Manage points of sale</li><li>Manage guests (delete)</li><li>Manage identity rules</li><li>Manage API access</li><li>View and create API keys</li><li>Edit and delete API keys for all team members</li><li>Access to [manage features](https://doc.sitecore.com/cdp/en/users/sitecore-cdp/managing-sitecore-cdp-system-settings/enable-features-in-sitecore-cdp.html)</li><li>Access to [enable or disable the debug feature](https://doc.sitecore.com/cdp/en/users/sitecore-cdp/managing-sitecore-cdp-system-settings/use-debug-mode-in-sitecore-cdp.html)</li><li>Access to enable or disable Audience Export file download</li></ul> |
| **Analytics User** | A Sitecore Cloud Portal role that provides permission to analytics. | <ul><li>View dashboards</li><li>View batch segmentation and usage</li><li>No access to [manage features](https://doc.sitecore.com/cdp/en/users/sitecore-cdp/managing-sitecore-cdp-system-settings/enable-features-in-sitecore-cdp.html)</li></ul> |
| **Read only** | A Sitecore Cloud Portal role that provides read-only permission. | <ul><li>View and filter homepage analytics</li><li>View guest profile</li><li>View audience export</li><li>View dashboards</li><li>View developer center entities</li><li>View company information</li><li>View points of sale</li><li>View identity rules</li><li>No access to [manage features](https://doc.sitecore.com/cdp/en/users/sitecore-cdp/managing-sitecore-cdp-system-settings/enable-features-in-sitecore-cdp.html)</li></ul> |