# Manage access > Navigate to the Manage Access section to start managing role assignments. Navigate to the Manage Access section to start managing role assignments. ![docs image](https://dev-assets.cms.uipath.com/assets/images/document-understanding/latest-docs-image-398812-c540d403-1d653e4e.webp) :::note Roles can be assigned to users, groups, or external applications. ::: ## Role Assignments Tab Here you can assign a new role by using the Assign role option, view a list with all the users that received roles, and the roles each user has. * **Sort the list** of available users by Name and Role(s). * Select the **Assign role** option for assigning a role(s) to a user, a group, or an external application. ![docs image](https://dev-assets.cms.uipath.com/assets/images/document-understanding/latest-docs-image-398816-5bf7b5c1-2b0e8c8a.webp) * Select the **Refresh**![docs image](https://dev-assets.cms.uipath.com/assets/images/document-understanding/latest-docs-image-265414-875bf79d-a76e3e47.webp) button whenever changes occurred. * Select the **More actions**![docs image](https://dev-assets.cms.uipath.com/assets/images/document-understanding/latest-docs-image-265429-e49420cb-451c47be.webp) menu to **Edit** or **Remove** the role(s) of a user, a group, or an external application. ![docs image](https://dev-assets.cms.uipath.com/assets/images/document-understanding/latest-docs-image-398821-53ee4535-d307bfcf.webp) ## Roles tab The Roles tab provides information about all available roles that can be assigned to a user. * Use the **Search** bar to initiate a search for a specific role. * Select the **Name**![docs image](https://dev-assets.cms.uipath.com/assets/images/document-understanding/latest-docs-image-265459-a520266b-bb67e61d.webp) sorting option to sort the roles alphabetic, in ascending, or descending order. * Select the **Refresh**![docs image](https://dev-assets.cms.uipath.com/assets/images/document-understanding/latest-docs-image-265414-875bf79d-a76e3e47.webp) button whenever changes occurred. * Select the **View**![docs image](https://dev-assets.cms.uipath.com/assets/images/document-understanding/latest-docs-image-265468-7cf2de88-0a771e77.webp) permissions option to visualize all available permissions for the selected role. ## Role permissions Each role has specific permission. Here is the complete list of all permissions assigned to each available role. You can choose between the following role permissions: * **Document Understanding Administrator**: has all permissions at both project and tenant level. * **Document Understanding Data Annotator**: can view projects, label documents, edit fields, but can't delete data from Document Types or publish project versions. * **Document Understanding Developer**: can read projects and can manage anything inside a project: classifiers, extractors, document types. Cannot create or delete projects. * **Document Understanding Model Trainer**: can view projects, label documents, edit fields, import or export data and delete data from a Document Type session. * **Document Understanding Viewer**: can view all entities but has no rights to edit or delete them. * **Document Understanding Project Administrator**: has all permissions to manage a project and users for the project. :::note This role is only available at project level. ::: ## Document Understanding Administrator permissions | **Permission** | **Description** | | --- | --- | | Classifier.Create | You can create a new classifier. | | Classifier.Delete | You can delete an already available classifier. | | Classifier.Read | You can read the classifier. | | Classifier.Update | You can update a classifier that is already available. | | DocumentType.Create | You can create new document types. | | DocumentType.Delete | You can delete document types. | | DocumentType.Read | You can read an already available Document Type. | | DocumentType.Update | You can update a document type that is already available. | | Extractor.Create | You can create a new extractor. | | Extractor.Delete | You can delete an already available extractor. | | Extractor.Read | You can read the extractor. | | Extractor.Update | You can update an extractor that is already available. | | MonitorProcessedDocuments.Read | You can read the processed documents from the Monitor section. | | MonitorProcessedDocumentsDetail.Read | You can read the processed documents detail from the Monitor section. | | MonitorProjectPerformance.Read | You can read the Projects Performance dashboard from the Monitor section. | | Project.Create | User can create new projects. | | Project.Delete | You can delete an already available project. | | Project.Read | You can read the project. | | Project.Update | You can update an already available project. | | ProjectVersion.Create | You can create new project versions. | | ProjectVersion.Delete | You can delete an already available project version. | | ProjectVersion.Read | You can read a project version. | | ProjectVersion.Update | You can update an already available project version. | | ProjectVersionLabel.Create | You can create new project version labels. | | ProjectVersionLabel.Delete | You can delete an already available project version label. | | ProjectVersionLabel.Read | You can read a project version label. | | ProjectVersionLabel.Update | You can update an already available project version label. | | TenantSettings.Create | You can create Document UnderstandingTM tenant level settings. | | TenantSettings.Read | You can read Document Understanding tenant level settings. | | TenantSettings.Update | You can update Document Understanding tenant level settings. | ## Document Understanding Data Annotator permissions | **Permission** | **Description** | | --- | --- | | Classifier.Read | You can read the classifier. | | DocumentType.Read | You can read an already available Document Type. | | DocumentType.Update | You can update a document type that is already available. You can update anything inside a particular document type (for example, add or remove documents, add or remove annotations, add or remove fields, and others). | | Extractor.Read | You can read the extractor. | | MonitorProcessedDocuments.Read | You can read the processed documents from the Monitor section. | | MonitorProcessedDocumentsDetail.Read | You can read the processed documents detail from the Monitor section. | | MonitorProjectPerformance.Read | You can read the Projects Performance dashboard from the Monitor section. | | Project.Read | You can read the project. | | ProjectVersion.Read | You can read a project version. | | ProjectVersionLabel.Read | You can read a project version label. | ## Document Understanding Developer permissions | **Permission** | **Description** | | --- | --- | | Classifier.Create | You can create a new classifier. | | Classifier.Delete | You can delete an already available classifier. | | Classifier.Read | You can read the classifier. | | Classifier.Update | You can update a classifier that is already available. | | DataSetExport.Create | Export data sets from a project version and manage the visibility of the download document(s) button. | | DataSetExport.Delete | Delete data set exports from a project version. | | DataSetExport.Read | Read data set exports from a project version. | | Documents.Delete | Delete documents from a project. | | DocumentType.Create | You can create new document types. | | DocumentType.Delete | You can delete document types. | | DocumentType.Read | You can read an already available Document Type. | | DocumentType.Update | You can update a document type that is already available. | | Extractor.Create | You can create a new extractor. | | Extractor.Delete | You can delete an already available extractor. | | Extractor.Read | You can read the extractor. | | Extractor.Update | You can update an extractor that is already available. | | MonitorProcessedDocuments.Read | You can read the processed documents from the Monitor section. | | MonitorProcessedDocumentsDetail.Read | You can read the processed documents detail from the Monitor section. | | MonitorProjectPerformance.Read | You can read the Projects Performance dashboard from the Monitor section. | | Project.Read | You can read the project. | | Project.Update | You can update an already available project. | | ProjectVersion.Create | You can create new project versions. | | ProjectVersion.Read | You can read a project version. | | ProjectVersion.Update | You can update an already available project version. | | ProjectVersionLabel.Read | You can read a project version label. | ## Document Understanding Model Trainer permissions | **Permission** | **Description** | | --- | --- | | Classifier.Read | You can read the classifier. | | DocumentType.Read | You can read an already available Document Type. | | DocumentType.Update | You can update a document type that is already available. | | Extractor.Read | You can read the extractor. | | MonitorProcessedDocuments.Read | You can read the processed documents from the Monitor section. | | MonitorProcessedDocumentsDetail.Read | You can read the processed documents detail from the Monitor section. | | MonitorProjectPerformance.Read | You can read the Projects Performance dashboard from the Monitor section. | | Project.Read | You can read the project. | | ProjectVersion.Create | You can create new project versions. | | ProjectVersion.Read | You can read a project version. | | ProjectVersion.Update | You can update an already available project version. | | ProjectVersionLabel.Read | You can read a project version label. | ## Document Understanding Viewer permissions | **Permission** | **Description** | | --- | --- | | Classifier.Read | You can read the classifier. | | DocumentType.Read | You can read an already available Document Type. | | Extractor.Read | You can read the extractor. | | MonitorProcessedDocuments.Read | You can read the processed documents from the Monitor section. | | MonitorProjectPerformance.Read | You can read the Projects Performance dashboard from the Monitor section. | | Project.Read | You can read the project. | | ProjectVersion.Read | You can read a project version. | | ProjectVersionLabel.Read | You can read a project version label. | ## Project Administrator permissions :::note This role is only available at project level. ::: | **Permission** | **Description** | | --- | --- | | Classifier.Create | You can create a new classifier. | | Classifier.Delete | You can delete an already available classifier. | | Classifier.Read | You can read the classifier. | | Classifier.Update | You can update a classifier that is already available. | | DataSetExport.Create | You can export a dataset from a project version and manage the visibility of the **Download document(s)** button. | | DataSetExport.Delete | You can delete a dataset export. | | DataSetExport.Read | You can read an available dataset export. | | Documents.Delete | You can delete documents. | | DocumentType.Create | You can create new document types. | | DocumentType.Delete | You can delete entire document types (including documents, annotations, schemas, etc.) | | DocumentType.Read | You can read an already available Document Type. | | DocumentType.Update | You can update a document type that is already available. You can update anything inside a particular document type (for example, add or remove documents, add or remove annotations, add or remove fields, and others). | | Extractor.Create | You can create a new extractor. | | Extractor.Delete | You can delete an already available extractor. | | Extractor.Read | You can read the extractor. | | Extractor.Update | You can update an extractor that is already available. | | MonitorProcessedDocuments.Read | You can read the processed documents from the Monitor section. | | MonitorProcessedDocumentsDetail.Read | You can read the processed documents detail from the Monitor section. | | MonitorProjectPerformance.Read | You can read the Projects Performance dashboard from the Monitor section. | | Project.Read | You can read the project. | | Project.Update | You can update an already available project. | | ProjectVersion.Create | You can create new project versions. | | ProjectVersion.Delete | You can delete an already available project version. | | ProjectVersion.Read | You can read a project version. | | ProjectVersion.Update | You can update an already available project version. | | ProjectVersionLabel.Create | You can create new project version labels. | | ProjectVersionLabel.Delete | You can delete an already available project version label. | | ProjectVersionLabel.Read | You can read a project version label. | | ProjectVersionLabel.Update | You can update an already available project version label. | ## Runtime permissions Users, groups, or robots with the **Project.Execute** permission can discover and execute models only after runtime permissions have been enabled. To enable runtime permissions: 1. Navigate to **Project settings**. 2. Switch on the **Enable Runtime Permissions** toggle. :::note Robots also require this permission to run models. Please ensure the correct roles or explicit permissions are granted to robot accounts. ::: **Best practices** * Only grant roles with **Project.Execute** permissions to trusted users. * Review project memberships and role assignments regularly. * Align role assignments with your organization’s security and governance policies.