# Roles

Roles in JMap Cloud define user categories, each associated with a specific set of privileges for accessing and modifying an organization's resources.

Each organization member is assigned exactly one of the following three roles:

* Administrator
* Manager
* User

These roles determine which features are accessible and which sections are visible in JMap Cloud Portal.

Only Administrators and Managers can sign in to JMap Cloud Portal. Users interact only with the mapping applications that publish the data configured in the portal, such as JMap NG.

The following diagram illustrates the relationship between roles:

* The Administrator has full access to all portal and application features.
* The Manager manages data and projects but does not have access to administrative functions.
* The User accesses only the applications (such as JMap NG) to view or interact with data, depending on the permissions granted to them.

<figure><img src="/files/zNcPjASQGEVO3k5iBFEU" alt="" width="200"><figcaption></figcaption></figure>

## Administrator

The Administrator is responsible for managing the organization in JMap Cloud Portal, including user management, API keys, and organizational settings.

Administrators can:

* Create, modify, and delete API keys
* Configure organization settings
* Invite new members
* Manage member roles (assignment and modification)
* Create, modify, and delete members
* Manage organization extensions

All these functions are available in the Organization section. The [Managing the Organization](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/managing-the-organization.md) chapter describes each function in detail.

Administrators can also quickly create API keys directly from the [Dashboard](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/introduction/dashboard.md).

Administrators also inherit all Manager privileges.

## Manager

The Manager does not have access to administrative functions but is responsible for configuring the projects published through JMap NG applications.

Managers can:

* Create, configure, modify, and delete the following resources:
  * Data sources
  * Projects
  * Map layers and non-spatial data tables
  * Forms
* Configure permissions for viewing and editing data.

These tasks are performed through the [Dashboard](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/introduction/dashboard.md), [Data Sources](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/integrating-data-data-sources.md), [Projects](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/organizing-data-into-projects.md), and [Forms](/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/creating-forms.md) sections of the Portal.

Managers also inherit all User privileges.

## User

The User is an organization member who accesses data through JMap NG applications.

{% hint style="info" %}
Users does not have access to JMap Cloud Portal.
{% endhint %}

Users can:

* View projects and their data.
* Navigate the map and interact with data (selection, information display, etc.).
* If permissions are granted, edit geometries and/or attributes of a layer or a non-spatial data table.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.jmapcloud.io/en/jmap-cloud-portal/user-guide-for-jmap-cloud-portal/introduction/roles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.