> For the complete documentation index, see [llms.txt](https://docs.jmapcloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.jmapcloud.io/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/introduction/roles.md).

# Roles

Roles in JMap Cloud define user categories, each associated with a specific set of privileges for accessing and modifying an organization's resources.

Each organization member is assigned exactly one of the following three roles:

* Administrator
* Manager
* User

These roles determine which features are accessible and which sections are visible in JMap Cloud Portal.

Only Administrators and Managers can sign in to JMap Cloud Portal. Users interact only with the mapping applications that publish the data configured in the portal, such as JMap NG.

The following diagram illustrates the relationship between roles:

* The Administrator has full access to all portal and application features.
* The Manager manages data and projects but does not have access to administrative functions.
* The User accesses only the applications (such as JMap NG) to view or interact with data, depending on the permissions granted to them.

<figure><img src="/files/zNcPjASQGEVO3k5iBFEU" alt="" width="200"><figcaption></figcaption></figure>

## Administrator

The Administrator is responsible for managing the organization in JMap Cloud Portal, including user management, API keys, and organizational settings.

Administrators can:

* Create, modify, and delete API keys
* Configure organization settings
* Invite new members
* Manage member roles (assignment and modification)
* Create, modify, and delete members
* Manage organization extensions

All these functions are available in the Organization section. The [Managing the Organization](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/managing-the-organization.md) chapter describes each function in detail.

Administrators can also quickly create API keys directly from the [Dashboard](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/introduction/dashboard.md).

Administrators also inherit all Manager privileges.

## Manager

The Manager does not have access to administrative functions but is responsible for configuring the projects published through JMap NG applications.

Managers can:

* Create, configure, modify, and delete the following resources:
  * Data sources
  * Projects
  * Map layers and non-spatial data tables
  * Forms
* Configure permissions for viewing and editing data.

These tasks are performed through the [Dashboard](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/introduction/dashboard.md), [Data Sources](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/integrating-data-data-sources.md), [Projects](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/organizing-data-into-projects.md), and [Forms](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/creating-forms.md) sections of the Portal.

Managers also inherit all User privileges.

## User

The User is an organization member who accesses data through JMap NG applications.

{% hint style="info" %}
Users does not have access to JMap Cloud Portal.
{% endhint %}

Users can:

* View projects and their data.
* Navigate the map and interact with data (selection, information display, etc.).
* If permissions are granted, edit geometries and/or attributes of a layer or a non-spatial data table.