> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flowx.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Access rights for Integration management

> Granular access rights can be configured for restricting access to the Integration Management plugin component. These access rights must be configured in the Designer (admin) deployment.

The following access authorizations are provided, with the specified access scopes:

1. **Manage-integrations** - for configuring access for managing integration management

Available scopes:

* **import** - users can import integrations
* **read** - users can view integrations
* **edit**- users can edit integrations
* **admin** - users can delete integrations

Integration management is preconfigured with the following default users roles for each of the access scopes mentioned above:

* manage-integrations
  * **import**:
    * ROLE\_ADMIN\_MANAGE\_INTEGRATIONS\_IMPORT
    * ROLE\_ADMIN\_MANAGE\_INTEGRATIONS\_EDIT
    * ROLE\_ADMIN\_MANAGE\_INTEGRATIONS\_ADMIN
  * **read**:
    * ROLE\_ADMIN\_MANAGE\_INTEGRATIONS\_READ
    * ROLE\_ADMIN\_MANAGE\_INTEGRATIONS\_IMPORT
    * ROLE\_ADMIN\_MANAGE\_INTEGRATIONS\_EDIT
    * ROLE\_ADMIN\_MANAGE\_INTEGRATIONS\_ADMIN
  * **edit**:
    * ROLE\_ADMIN\_MANAGE\_INTEGRATIONS\_EDIT
    * ROLE\_ADMIN\_MANAGE\_INTEGRATIONS\_ADMIN
  * **admin**:
    * ROLE\_ADMIN\_MANAGE\_INTEGRATIONS\_ADMIN

<Warning>
  These roles need to be defined in the chosen identity provider solution. It can be either kyecloak, RH-SSO, or another identity provider solution. For more details on how to define service accounts, check the [Access rights](../../../../setup-guides/access-management/configuring-an-iam-solution) section.
</Warning>

In case other custom roles are needed, you can configure them using environment variables. More than one role can be set for each access scope.

To configure access for each of the roles above, adapt the following input:

**`SECURITY_ACCESSAUTHORIZATIONS_AUTHORIZATIONNAME_SCOPES_SCOPENAME_ROLESALLOWED: NEEDED_ROLE_NAMES`**

Possible values for AUTHORIZATIONNAME: MANAGEDOCUMENTTEMPLATES.

Possible values for SCOPENAME: import, read, edit, admin.

For example, if you need to configure role access for read, insert this:

```
SECURITY_ACCESSAUTHORIZATIONS_MANAGEINTEGRATIONS_SCOPES_READ_ROLESALLOWED: ROLE_NAME_TEST
```


## Related topics

- [Integration Designer access rights](/4.7.x/setup-guides/access-management/configuring-access-rights-for-integration-designer.md)
- [Task management plugin access rights](/4.6.0/setup-guides/plugins-access-rights/configuring-access-rights-for-task-management.md)
- [Workspaces access rights](/5.1/setup-guides/access-management/workspaces-access-rights.md)