Roles and permissions form the foundation of the access control system of Source CMS by enabling you to define who can do what on your site.

In Source CMS:

• Users are individual accounts with unique login credentials.
• Roles are collections of permissions that define what actions users can perform.
• Permissions are specific abilities to specific actions such as creating content and administering users.

This role-based access control system provides flexible and granular control over user capabilities.

Default roles

Source CMS comes with the following predefined or default roles:

Default roles provide a starting point. Default roles are granted within the Sites Dashboard. You can customize the permissions granted for the member role to meet the needs of your organization.

Custom roles

Custom roles and their related permissions can be created at the site level to meet your specific workflow needs.

The following table lists some example custom roles and permissions for a common editorial process:

Agent role

The Agent role is a system-managed role reserved exclusively for the Acquia AI agent when operating in Work mode. It is not available for assignment to human users.

• The Agent role is built specifically for AI agent operations and prevents permission inheritance from human users.
• Source CMS provides no permission controls to expand or modify the Agent role's capabilities.
• Administrators can control which Source CMS sites the agent has access to, but cannot modify the role itself.

For full details on how the agent operates within this role, see Governance and control management and Data handling, privacy, and security.

Roles and permissions