# Users, roles, and permissions

SQRL Enterprise uses role-based access control scoped to each workspace. A role is a named set of permissions, and every member of a workspace holds one. Roles are how you separate duties: issuance from compliance, proposing from approving.

> Part of the SQRL documentation, section "SQRL Enterprise".
> Rendered page: https://docs.sqrl.tech/enterprise/users-roles-and-permissions

Read [Roles and permissions](/enterprise/users-roles-and-permissions/roles-and-permissions) to design your roles, then [Inviting and managing users](/enterprise/users-roles-and-permissions/inviting-and-managing-users) to add people.

  Access control is workspace-scoped. A user can hold different roles in different workspaces, and a role in one workspace grants nothing in another.