---
title: "Users, roles, and domains"
slug: "users-roles-and-domains"
abstract: "Introduction to Sitecore access security control via users, roles and domains."
---
# Users, roles, and domains

In Sitecore, access security is controlled on three levels:

- [user](https://doc.sitecore.com/xp/en/developers/104/platform-administration-and-architecture/create-a-user.html "Create a user") - an individual user
- [role](https://doc.sitecore.com/xp/en/developers/104/platform-administration-and-architecture/create-and-set-up-a-role.html "Create and set up a role") - a collection of users. Roles enable you to assign access rights to a group of users instead of to an individual user
- [domain](https://doc.sitecore.com/xp/en/developers/104/platform-administration-and-architecture/security-domains.html "Security domains") - a collection of security accounts

With these three levels of security you can control all user access to Sitecore functionality and website content.