> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/admin-user-guide/access-policies-and-approvals/access-control-overview.md).

# Access control overview

Access Control is where you grant users and groups access to the resources you have registered in SECUREpass. Manage Resources defines *what exists* in your environment — applications, systems, databases, cloud resources. Access Control defines *who may reach them*, with which role, and under what conditions.

This guide covers the Access Control screen only. Access Graph and Access Review, the other two pages under Access Management, are covered separately.

## Where access control sits

In the left navigation, expand **Access Management**. It contains three pages: **Access Graph**, **Access Control** and **Access Review**. Select **Access Control**.

## The Access Control page

The page opens on the **Applications** tab. Six tabs run across the top, one for each type of resource you can grant access to:

| Tab                 | Grants access to                                                 |
| ------------------- | ---------------------------------------------------------------- |
| Applications        | Applications registered under Manage Resources                   |
| Public Applications | Shared SaaS applications reached through the Self Service Portal |
| Systems             | Servers and workstations onboarded as systems                    |
| Databases           | Database instances onboarded under Manage Resources              |
| Cloud Resources     | Cloud accounts and their resources                               |
| Radius Profiles     | RADIUS profiles used for network authentication                  |

Within each tab, **User Profiles** lists the grants made to individual users and **Group Profiles** lists the grants made to groups.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/SVYqh2ey35FNf61dJQnW/assets/01.png)

For applications, each row shows the user, the application, the role they hold, the authentication types they must satisfy to sign in, who created and last modified the grant, and its status. The actions at the end of the row let you edit or delete the grant.

{% hint style="info" %}
The **Auth Types** column reflects the authentication methods assigned to that user for that application. You choose them when you assign the role — see *Applications & Resources → Assigning roles and authentication*.
{% endhint %}