Skip to content

Commit 921d44e

Browse files
committed
modified rbac and gac definitions
1 parent ab8a51b commit 921d44e

1 file changed

Lines changed: 6 additions & 4 deletions

File tree

docs/roles-and-permissions/overview.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -9,13 +9,15 @@ Plane uses a layered access control system to determine what every user can see
99

1010
If you're looking for what a specific role can or can't do, see the [Permissions matrix](/roles-and-permissions/permissions-matrix). If you want a list of system roles, see [Member roles](/roles-and-permissions/member-roles). If you want to perform a task, see the how-to guides linked at the bottom of this page.
1111

12-
## How GAC and RBAC fit together
12+
## Essential differences between RBAC and GAC
1313

14-
Plane's permission system pairs two complementary concepts.
14+
RBAC is the default inside Plane. GAC lets you define roles with fine-grained permissions.
1515

16-
**Granular Access Control (GAC)** is the catalog of fine-grained permissions — actions like editing a work item, publishing a page, archiving a project, or managing labels. Every action a user takes in Plane is one of these granular permissions.
16+
**Role-Based Access Control (RBAC)**
17+
Every user holds a role—either a system-defined one like Owner, Admin, Member, Guest, Contributor, or Commenter or a [custom one](/roles-and-permissions/custom-roles)—and that role carries a defined set of permissions. All of our plans come with pre-set system-defined roles.
1718

18-
**Role-Based Access Control (RBAC)** is how those permissions get assigned. Every user holds a role — either a system-defined role (Owner, Admin, Member, Guest, Contributor, or Commenter) or a [custom role](/roles-and-permissions/custom-roles) — and the role bundles a defined set of GAC permissions.
19+
**Granular Access Control (GAC)**
20+
GAC unlocks custom roles, each composed of one or more permission schemes. This lets you go beyond system-defined roles to create and control exactly what a role can and cannot do.
1921

2022
:::tip
2123
Owner, Member, and Guest are available on all plans. Other system-defined roles are exclusive to the Business plan and higher. See [Plan availability](/roles-and-permissions/overview#plan-availability).

0 commit comments

Comments
 (0)