# Managing roles

Managing roles is a part of the identity and access management. Access to certain functions should be restrained, e.g. for security reasons. An administrator can assign permissions to roles to give each role only the permissions the role needs.

A user assigned the administrator role is granted all permissions. Only the adminstrator role has permissions for:

- Administrating Node-RED
- Managing the identity and access management
- Managing Add-ons

- Creating a role
- Deleting a role
- Changing permissions of a role
- Allowing unauthenticated access
- Changing unauthenticated access