# Security Roles A security role defines how different users, or groups, can access the QEs and QAC. To assign a security role you to a user or group you need to access the User and Group detail page in the QAC. Each user can have multiple security roles. Security role privileges are cumulative: having more than one security role gives a user every privilege available in every role. The following matrix describes the privileges for each role: | Role | QAC Access | Extension Access | | --------------------- | -------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Root Admin | Can access all sections | Can perform all actions | | Security Admin | Can only access to the Security section | N/A | | Workflow Admin | Can only access to the Workflow Section | N/A | | Editor Admin | Can access to all Commentary and Comments section | Can create, update, delete, publish, recall, and submit for approval any commentary in an Insights extension for any application | | Approver Admin | Can access only Published Commentaries and Comments and not archived | Can approve any workflow in an Insights extension for any application | | Developer Admin | Can only access Invalid Resources link under configuration section | N/A | | Writeback Admin | Can perform all actions related to writeback | Can perform all actions in a Writeback Table extension for any application | | Pivot Admin | N/A | Can add and delete comments in a Pivot Table extension for any application | | Data Connection Admin | N/A | Can add, edit, or delete all writeback connections. However, if there are any security rules associated with data connections, the user can only execute those actions if rules conditions are satisfied. | --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://knowledgebase.qommentary.com/qommentary-admin-console/administration/security-roles.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.