> For the complete documentation index, see [llms.txt](https://knowledgebase.qommentary.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://knowledgebase.qommentary.com/qommentary-admin-console/administration/security-roles.md).

# Security Roles

A security role defines how different users, or groups, can access the QEs and QAC. To assign a security role you to a user or group you need to access the User and Group detail page in the QAC. Each user can have multiple security roles.

Security role privileges are cumulative: having more than one security role gives a user every privilege available in every role.

The following matrix describes the privileges for each role:

| Role                  | QAC Access                                                           | Extension Access                                                                                                                                                                                          |
| --------------------- | -------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Root Admin            | Can access all sections                                              | Can perform all actions                                                                                                                                                                                   |
| Security Admin        | Can only access to the Security section                              | N/A                                                                                                                                                                                                       |
| Workflow Admin        | Can only access to the Workflow Section                              | N/A                                                                                                                                                                                                       |
| Editor Admin          | Can access to all Commentary and Comments section                    | Can create, update, delete, publish, recall, and submit for approval any commentary in an Insights extension for any application                                                                          |
| Approver Admin        | Can access only Published Commentaries and Comments and not archived | Can approve any workflow in an Insights extension for any application                                                                                                                                     |
| Developer Admin       | Can only access Invalid Resources link under configuration section   | N/A                                                                                                                                                                                                       |
| Writeback Admin       | Can perform all actions related to writeback                         | Can perform all actions in a Writeback Table extension for any application                                                                                                                                |
| Pivot Admin           | N/A                                                                  | Can add and delete comments in a Pivot Table extension for any application                                                                                                                                |
| Data Connection Admin | N/A                                                                  | Can add, edit, or delete all writeback connections. However, if there are any security rules associated with data connections, the user can only execute those actions if rules conditions are satisfied. |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://knowledgebase.qommentary.com/qommentary-admin-console/administration/security-roles.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
