# Permissions

## Overview

Servoy Cloud supports both authentication services and authorization using role-based access control (RBAC).

Application Security Permissions displays a table view of all permissions defined for an application, allowing you to create or delete permissions.

## Permission types

Permissions in Servoy Cloud are of two types, each with different characteristics and management options:

### **Source Permissions**

* **Definition**: These permissions are defined in Servoy Developer and are saved during the build time of a job.
* **Scope**: Source permissions are created for all applications within a workspace.
* **Management**: Source permissions cannot be deleted from the Cloud Control Center.

### **Servoy Cloud Permissions**

* **Definition**: These permissions are created directly from the Cloud Control Center Application Security view.
* **Scope**: Servoy Cloud permissions are specific to a single application.
* **Management**: Unlike source permissions, Servoy Cloud permissions can be deleted from the Application Security view in the Cloud Control Center.

## Create Permission

{% hint style="danger" %}
Once created, permission details cannot be modified.
{% endhint %}

### Source Permission

To create a source permission:

1. **Open Servoy IDE**:
2. **Navigate to Users and Permissions**:
   * In the Solution Explorer, locate and open `Users and Permissions`, which is listed below `Database Servers`.
3. **Create a New Permission**:
   * In the User/Permissions Editor, enter the desired permission name in the textbox.
   * Save the permission by clicking the `New Permission` button.

{% hint style="success" %}
You have successfully created a source permission. This permission will be included in the list at build time for all applications within that workspace.
{% endhint %}

<figure><img src="/files/D2NeVaxnHX3gE57G7L0F" alt=""><figcaption><p>Create source permission in Servoy IDE</p></figcaption></figure>

### Servoy Cloud Permission

To create a Servoy Cloud permission for an application:

1. **Open Cloud Control Center**
2. **Navigate to Security**:
   * Go to `Applications -> Security` in the Servoy Cloud Control Center.
3. **Create a New Permission**:
   * Click the `Create Permission` button.
   * Define the permission details, ensuring the following requirements are met:
     * The permission name does not contain spaces.
     * The permission name is unique within the application.
4. **Save Permission**

{% hint style="success" %}
You have now created a **Servoy Cloud permission**, which can be assigned to a Role.
{% endhint %}

<figure><img src="/files/HAYnYTIMjwNSfPiSVJhh" alt=""><figcaption><p>Create Servoy Cloud Permission in Cloud Control Center</p></figcaption></figure>

## Delete permission

Deleting a permission is a permanent action and cannot be reverted. If you want to remove a permission from a role, see [Roles](/reference/servoy-cloud/cloud-control-center/user-management/security-roles.md).

If you want to permanently delete a permission and remove it from all roles, follow the instructions below.

### Source permission

To delete a source permission:

1. Open Servoy IDE
2. **Navigate to Users and Permissions**:
   * In the Solution Explorer, locate and open `Users and Permissions`, listed below `Database Servers`.
3. **Delete a Permission**:
   * In the User/Permissions Editor, select the permission by clicking the checkbox next to it.
   * Remove the permission by clicking the `Remove Permission(s)` button.

{% hint style="success" %}
You have successfully removed a source permission. This change will be reflected in the next build of any solutions within the workspace.
{% endhint %}

<figure><img src="/files/GwiDFovlYZXqRF5MdFki" alt=""><figcaption><p>Delete source permission in Servoy IDE</p></figcaption></figure>

### Servoy Cloud Permission

{% hint style="warning" %}
Deleting a Servoy Cloud permission is permanent and will remove it from all roles it was assigned to.
{% endhint %}

To delete a Servoy Cloud permission from an application:

1. **Navigate to Security**:
   * Go to `Applications -> Security` in the Servoy Cloud Control Center.
2. **Delete a Permission**:
   * Click on the delete icon <img src="/files/LWCYDqwJAmDLhFXnsaeU" alt="" data-size="line"> next to the chosen permission.
   * Confirm your intent to delete the Servoy Cloud permission.

{% hint style="success" %}
You have successfully deleted a Servoy Cloud permission. It has been automatically removed from all the roles to which it was assigned.
{% endhint %}

<figure><img src="/files/mkjmyI5YOMTdMKT8OeRa" alt=""><figcaption><p>Delete Servoy Cloud permission in Cloud Control Center</p></figcaption></figure>

## Use Security Permissions

To use the Application Security permissions and ensure a complete authorization flow, permissions must be assigned to roles. For role setup and more details, see [Roles](/reference/servoy-cloud/cloud-control-center/user-management/security-roles.md).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.servoy.com/reference/servoy-cloud/cloud-control-center/application-overview/applications/security/permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.