# Roles

Role is useful for combining multiple policies together. There are 2 types of roles in ODD Platform:

* User roles
* Owner roles

#### User roles

There are 2 user roles:

* USER - regular user who doesn't have any permissions by default
* ADMIN - administrator, who has all permissions

User role is defined via properties, when you configure Authentication method. (e.g. admin groups for AWS Cognito or admin team in GitHub). If user matches admin condition he will have ADMIN role, otherwise he will be assigned USER role.

#### Owner roles

Owner roles can be managed in ODD Platform via `Management - Roles` section. As the name implies, these roles are assigned to [Owners](/configuration-and-deployment/enable-security/authorization/owners.md), not to users.

When user is associated with owner (please check the [User-owner association](/configuration-and-deployment/enable-security/authorization/user-owner-association.md) section for more details) he will inherit owner roles, ignoring previously assigned user roles, e.g. user was logged in and got ADMIN role. After that he associated himself with owner, which has Data Engineer role. He will lose his admin privileges and have Data engineer role.

{% hint style="warning" %}
Be careful and don't associate user with admin role with non-admin owner. You need to create owner with admin role first and then associate your admin user with this owner.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.opendatadiscovery.org/configuration-and-deployment/enable-security/authorization/roles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.