> For the complete documentation index, see [llms.txt](https://docs.primeur.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.primeur.com/panorama-2.0.1/setup-and-configuration/users-and-roles-setup/set-roles.md).

# Set roles

The **Roles** tab allows Administrators to create and manage user roles and assign them **specific permissions** that determine the operations they are allowed to execute.

There are 2 default roles:

* **Administrator**: it has all the permissions to set up and manage all features.
* **Guest:** it has all the permissions to manage personal dashboards and other features related to them (e.g., sharing). The Guest role does not have access to the **Setup** page.

Roles must be created before they can be assigned to users.

To create a new role, follow these steps:

1. Go to **Setup** and click the Roles tab. 
2. Click the **New Role** button.
3. In the **New role** window, assign a unique name to the role you are creating.
4. In the panel on the right, enable the permissions you want to assign to the role you are creating. To search for a specific permission, you can enter a portion of the name in the edit box with the lens.
5. Click the **Save** button to confirm.

Once a role is created, it will be available in the **Users** tab.

{% hint style="info" %}
Start with the **Guest** role and create additional roles by enabling only the permissions strictly required. This helps follow the principle of least privilege.
{% endhint %}

To assign roles to users, see [Manage users](/panorama-2.0.1/setup-and-configuration/users-and-roles-setup/manage-users.md).