[id='security-authorization']
:context: security-authorization
= Configuring user roles and permissions

Authorization is a security feature that requires users to have certain permissions before they can access caches or interact with {brandname} resources.
You assign roles to users that provide different levels of permissions, from read-only access to full, super user privileges.

include::{topics}/con_cache_authorization.adoc[leveloffset=+1]
include::{topics}/ref_user_roles_permissions.adoc[leveloffset=+2]
include::{topics}/ref_authz_permissions.adoc[leveloffset=+2]
include::{topics}/ref_authz_role_mappers.adoc[leveloffset=+2]
include::{topics}/ref_acl_cache.adoc[leveloffset=+1]

include::{topics}/proc_customizing_authorization.adoc[leveloffset=+1]
include::{topics}/proc_configuring_cache_authorization.adoc[leveloffset=+1]
include::{topics}/proc_disabling_authorization.adoc[leveloffset=+1]

ifdef::embedded_caches[]
include::{topics}/proc_configuring_authz_programmatic.adoc[leveloffset=+1]
include::{topics}/ref_executing_secure_caches.adoc[leveloffset=+1]
endif::embedded_caches[]

// Restore the parent context.
ifdef::parent-context[:context: {parent-context}]
ifndef::parent-context[:!context:]
