--- title: What Are Roles In Edgescan? description: This article explains what Roles are in Edgescan and how they should be used to control the role based access controls. --- [Skip to content](https://kb.edgescan.com/knowledge/what-are-roles-in-edgescan#main-content) English Show submenu for translations [![Edgescan Cybersecurity Platform | EASM + RBVM + PTaaS](https://kb.edgescan.com/hs-fs/hubfs/Logos/23LOGOS-thicker/Edgescan-Logo-Black.png?width=200&height=40&name=Edgescan-Logo-Black.png)](https://www.edgescan.com/) Open main navigation Close main navigation - English Show submenu for translations Search the Edgescan knowledge base - There are no suggestions because the search field is empty. 1. [Help Center](https://kb.edgescan.com/knowledge?hsLang=en) 2. [Organization Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en) 3. [Roles Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#roles-administration) # What Are Roles In Edgescan? ## This article explains what Roles are in Edgescan and how they should be used to control the role based access controls. Version Number: v1.0.2 Published Date: 23 Sept 2026 \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ #### **Purpose** This article introduces **Role-Based Access Control (RBAC)** in Edgescan, explains why roles exist, and how they simplify managing user access compared to direct permissions. #### **What is RBAC?** Role-Based Access Control (RBAC) is a security model that assigns permissions to **roles**, rather than directly to individual users. Users are then assigned one or more roles, which determine what actions they can perform in the platform. #### **Why Roles?** - **Simplifies Administration:** Instead of managing dozens of individual permissions per user, you assign a role that bundles relevant permissions. - **Consistency:** Ensures users with similar responsibilities have the same access. - **Security:** Supports the principle of **least privilege**, reducing risk by granting only what’s necessary. #### **Default Roles in Edgescan** Edgescan provides a set of predefined roles to cover common operational needs. Roles can be **combined**, meaning a user can hold multiple roles if necessary. #### **Organization Roles** - **[Org Administrator](https://kb.edgescan.com/knowledge/what-does-the-org-admin-role-allow?hsLang=en):** Can configure organization-level settings and has the same administrative controls as an Asset and Scan Administrator. - **[Org Viewer](https://kb.edgescan.com/knowledge/what-does-the-org-viewer-role-allow?hsLang=en):** Can view organization-level, Asset level and Scan level details but cannot make changes. #### **Asset Roles** - **[Asset Administrator](https://kb.edgescan.com/knowledge/what-does-the-asset-admin-role-allow?hsLang=en):** Can add, edit, and configure assets. #### **Scan Roles** - **[Scan Administrator](https://kb.edgescan.com/knowledge/what-does-the-scan-admin-role-allow?hsLang=en):** Full control over scanning operations. #### **Important Notes** - Roles can be **combined** for flexibility. - The **Superuser role is deprecated**. For guidance on migrating from Superuser to role-based access, see: Migration from Superuser to Roles. #### **Roles vs Direct Permissions** Edgescan supports both: - **Roles:** Predefined sets of permissions for common responsibilities. - **Direct Permissions:** Granular controls for advanced scenarios where fine-tuning is required. Roles are recommended for most cases because they are easier to manage and maintain. - [Getting Started](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#main-content) - [Quick Start](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#quick-start) - [Prerequisites & Network Requirements](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#prerequisites-network-requirements) - [Compliance Context](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#compliance-context) - [Attack Surface Management](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#main-content) - [Concepts](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#concepts) - [Discovery Methods](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#discovery-methods) - [Asset Inventory](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#asset-inventory) - [Vulnerability Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#main-content) - [Enabling & Disabling Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#enabling-disabling-scanning) - [Scope & Targeting](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scope-targeting) - [Setting Authentication](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#setting-authentication) - [DAST Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#dast-scanning) - [API Settings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#api-settings) - [Scanning Complex Workflows](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scanning-complex-workflows) - [Vulnerability Risk Ratings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#vulnerability-risk-ratings) - [Additional Configurations](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#additional-configurations) - [Agentic PTaaS](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#main-content) - [Overviews and Concepts](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#overviews-and-concepts) - [Using Atomic](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#using-atomic) - [Safety and Privacy](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#safety-and-privacy) - [Human PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#main-content) - [Concepts & Methodologies](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#concepts-methodologies) - [Scheduling PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#scheduling-ptaas) - [Platform Usage](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#main-content) - [Platform Navigation](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#platform-navigation) - [Asset Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-management) - [Vulnerability Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#vulnerability-management) - [License Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#license-management) - [Credentials Vault](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#credentials-vault) - [Asset Blockers](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-blockers) - [Reporting & Dashboards](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#reporting-dashboards) - [AI Insights](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#ai-insights) - [Compliance & Frameworks](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#compliance-frameworks) - [Additional License Details](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#additional-license-details) - [Platform Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#main-content) - [Notifications & Events](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#notifications-events) - [Internal/Private Testing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#internal-private-testing) - [API & Authentication](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#api-authentication) - [Scheduled Exports](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#scheduled-exports) - [Cloud Platforms](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloud-platforms) - [CloudHook](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloudhook) - [ITSM & Ticketing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#itsm-ticketing) - [SIEM & SOAR](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#siem-soar) - [CI/CD & DevOps](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#ci-cd-devops) - [Communication Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#communication-automation) - [Other Automations](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#other-automations) - [Organization Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#main-content) - [Organization Setup](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-setup) - [User Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#user-administration) - [Roles Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#roles-administration) - [Account Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#account-settings) - [Organization Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-settings) - [Updates & Announcements](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#main-content) - [2026 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2026-updates) - [2025 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2025-updates) - [2024 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2024-updates) - [2023 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2023-updates) - [API Changes](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#api-changes) - [OWASP API 2019](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#owasp-api-2019) [![Chill listening crop-3](https://kb.edgescan.com/hs-fs/hubfs/Edgescan-blac-logo.webp?width=68&height=55&name=Edgescan-blac-logo.webp "Chill listening crop-3")](https://www.edgescan.com) Copyright © 2026 Edgescan. All rights reserved.