---
title: "Roles"
slug: "roles"
abstract: "Overview of the different types of roles in the Sitecore Cloud Portal."
---
# Roles

In the Sitecore Cloud Portal, you can assign roles to a user to determine their access to apps and features. There are two types of roles in the portal:

- *[Organization role](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/roles.html#UUID-9632b1ff-3d1e-4229-8297-521fb0453e59_section-idm17313581634964106 "Organization roles")* - determines if you can invite others to the organization, assign roles, and perform other admin tasks.
- *[App roles](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/roles.html#UUID-9632b1ff-3d1e-4229-8297-521fb0453e59_section-idm173217306159425666 "App roles")* - for each app in the organization, these roles determine whether you can access the app and what you can do with it. Each Sitecore product has a unique set of app roles.

> [!note]
> People with the *Organization Owner* or *Organization Admin* role automatically have the highest role for all apps in the organization.

## Organization roles

Your organization role determines your default app access and your ability to manage users and organization settings.

A user's organization role is assigned when they are [invited to the organization](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/invite-users-to-your-sitecore-cloud-portal-organization.html "Invite users to your Sitecore Cloud Portal organization"). This role can be [changed on their details page](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/manage-the-access-of-a-user.html "Manage the access of a user") if needed.

> [!note]
> Users can't change their own organization role or remove themselves from an organization.

- *Organization Owner* - always has the highest role in all apps. Can invite new users and make them an *Organization Owner*, *Organization Admin*, or *Organization User* and manage the organization's settings. When an organization is created, Sitecore sends an email invitation to the assigned owner.
- *Organization Admin* - always has the highest role in all apps. Can invite new users and make them an *Organization Admin* or *Organization User* and also manage the organization's settings.
- *Organization User* - only has access to assigned apps. Cannot invite other users or modify their role and cannot manage the organization's settings.

> [!note]
> We strongly recommend that you have more than one *Organization Owner*, in case one of them leaves the organization unexpectedly or cannot log in to their account. If your *Organization Owner* plans to leave, they must first assign a new *Organization Owner*.

## Organization role capabilities

The following table shows the capabilities available for each organization role:

| Capability | Organization Owner | Organization Admin | Organization User |
| --- | --- | --- | --- |
| Access all apps in the organization | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| Access only apps where they have a specific app role, granted by an *Organization Owner* or *Organization Admin* | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) |
| [Invite people to the organization](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/invite-users-to-your-sitecore-cloud-portal-organization.html) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| [Change the organization role and app roles of other team members](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/manage-the-access-of-a-user.html) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| Change their own organization role or app roles | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| [Add or remove](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/manage-the-access-of-a-user.html) an *Organization User* | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| [Add or remove](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/manage-the-access-of-a-user.html) an *Organization Admin* | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| [Add or remove](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/manage-the-access-of-a-user.html) an *Organization Owner* | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| Remove themselves from the organization | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| [Manage SSO connections](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/single-sign-on--sso-.html) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| [Manage multi-factor authentication](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/manage-multi-factor-authentication.html) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| Access the [Sitecore AI Deploy app](https://doc.sitecore.com/xmc/en/developers/xm-cloud/en/deploy-app.html) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| Use the Common Audit Log's [Webhook REST API](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/webhook-rest-api.html) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| [Create a support case](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/create-a-support-case.html) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| [Set up a custom hostname](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/set-up-a-custom-hostname.html) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| [Manage Sitecore Support access](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/manage-sitecore-support-access.html) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| [Create, install, and manage Marketplace apps](https://doc.sitecore.com/mp/en/developers/marketplace/create-a-custom-marketplace-app.html) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| [Access all Marketplace apps](https://doc.sitecore.com/mp/en/developers/marketplace/manage-app-access.html) installed in the organization | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) |
| Access only those installed Marketplace apps where they have [app access](https://doc.sitecore.com/mp/en/developers/marketplace/manage-app-access.html) granted by an *Organization Owner* or *Organization Admin* | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) | ![No](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-cross-no.svg) | ![Yes](https://doc.sitecore.com/api/markdown-image/portal/en/developers/sitecore-cloud-portal/images/icon-check-yes.svg) |

## App roles

An app role determines whether an *Organization User* can access a specific app, and what they can do in that app.

By default, an *Organization User* does not have access to any apps in the organization and needs to be [assigned app roles](https://doc.sitecore.com/portal/en/developers/sitecore-cloud-portal/portal-administration/manage-the-access-of-a-user.html#UUID-d2ea8820-2b7b-bf34-1dc8-bdfa29cc7ad9_section-idm4624987410656033287041683559 "Change the app role of a user").

People with an *Organization Admin* or *Organization Owner* role automatically have the highest role in all apps. For example, an *Organization Admin* will always have the `Admin` role in all SitecoreAI apps.

Each Sitecore product can have different roles, and depending on the app role assigned, a team member might have limited or no access to certain features within an app.

Use the following links to learn more about app roles for specific Sitecore products:

- [SitecoreAI](https://doc.sitecore.com/xmc/en/developers/xm-cloud/en/creating-users-in-sitecoreai.html)
- [Content Hub ONE](https://doc.sitecore.com/ch-one/en/users/content-hub-one/en/access-management.html)
- [CDP](https://doc.sitecore.com/cdp/en/users/sitecore-cdp/en/managing-roles-in-sitecore-cloud-portal.html)
- [Personalize](https://doc.sitecore.com/personalize/en/users/sitecore-personalize/en/managing-roles-in-sitecore-cloud-portal.html)
- [OrderCloud](https://ordercloud.io/knowledge-base/app-access-for-ordercloud-sitecore-cloud-portal)
- Send
- [Search](https://doc.sitecore.com/search/en/users/search-user-guide/en/managing-roles-in-sitecore-search.html)
- [Connect](https://doc.sitecore.com/connect/en/users/sitecore-connect/managing-roles-in-sitecore-connect.html)
- [SitecoreAI Deploy app](https://doc.sitecore.com/sai/en/developers/sitecoreai/deploying-sitecoreai.html)
- [Stream](https://doc.sitecore.com/stream/en/users/sitecore-stream/en/managing-roles-in-sitecore-stream.html)
- [Marketplace](https://doc.sitecore.com/mp/en/developers/marketplace/manage-app-access.html)