---
title: "Set up security for a tenant and a site"
slug: "set-up-security-for-a-tenant-and-a-site"
abstract: "Use the predefined SXA roles to manage user's access to items and content."
---
# Set up security for a tenant and a site

You can use the [predefined SXA roles](https://doc.sitecore.com/xp/en/developers/sxa/103/sitecore-experience-accelerator/the-sxa-security-roles.html "The SXA security roles") to manage user's access to items and content. Before you can assign these roles to users, you must set up security for the tenant and site.

> [!note]
> You can only set up security for sites after you set up the security for the tenant.

<details>
<summary><h2>Set up security for a tenant</h2></summary>

To set up security for a tenant:

1. Right-click the tenant, click **Scripts** and then click **Setup****Security**.
2. In the **Security domain** dialog box either:
    - Click the Sitecore domain, and click **Proceed.**
    - Click **Create new domain**, click **Proceed** and enter a domain name, and click **Create**.

    > [!note]
    > If you select a different domain than Sitecore, you must set the read/write permissions on the Languages node for one of the base roles or for the Everyone role of your domain.

3. In the **Tenant security roles** dialog box:
    - To add the default SXA roles, click **Assign**.
    - To select a different role, click ![43C91866CF644ABAA4D467B3534849CA.png](https://doc.sitecore.com/api/markdown-image/xp/en/developers/sxa/103/sitecore-experience-accelerator/images/43C91866CF644ABAA4D467B3534849CA.png) and then click **Assign**.

    ![Tenant security roles dialog box.](https://doc.sitecore.com/api/markdown-image/xp/en/developers/sxa/103/sitecore-experience-accelerator/images/0C330272DE90494995B1265C47C2A7B6.png)

    > [!note]
    > To clear the domain, or undo the security settings, click the Tenant and in the Security section clear the Role domain field.

</details>

<details>
<summary><h2>Set up security for a site</h2></summary>

Before you can set up the security for a site, you must set up security for its tenant.

To set up security for a site:

1. Right-click the site, click **Scripts** and then click **Setup****Security**.
2. In the **Security domain** dialog box either:
    - Click the Sitecore domain, and click **Proceed**.
    - Click **Create****new****domain**, then click **Proceed** and enter a domain name, and click **Create**.

    > [!note]
    > By default, the domain you selected for the tenant is preselected.

3. In the **Site security roles** dialog box:
    - To add the default roles, click **Assign**.
    - To select a different role, click ![B445E006AE034FE2A32442F516DA669E.png](https://doc.sitecore.com/api/markdown-image/xp/en/developers/sxa/103/sitecore-experience-accelerator/images/B445E006AE034FE2A32442F516DA669E.png) and then click **Assign.**

    ![Site security roles dialog box.](https://doc.sitecore.com/api/markdown-image/xp/en/developers/sxa/103/sitecore-experience-accelerator/images/B8F07FD71226496383D7E0CF22C43F14.png)

After you have configured security for your tenant and site, you can create new users and assign them to the Admin, Author, Designer role in the User Manager.

> [!note]
> To clear the domain, or undo the security settings, click the Site and in the Security section clear the Role domain field.

</details>