# Access control

Concept · [Cloud, hosting and security](https://ecosystem.samcarlton.com/cloud)

Also called: permissions, authorization rules, access rights, user permissions

Rules about who can see or change what in a system. Signing in proves who you are; access control decides what you are allowed to do.

**For example:** In a school app, teachers can edit grades, students can only view their own, and parents see only their child's.

## Connects to (4)

- [Role-based access control](https://ecosystem.samcarlton.com/role-based-access-control): A way of managing access where permissions are given to roles, such as admin, editor or viewer, and each person is assigned a role.
- [Authentication](https://ecosystem.samcarlton.com/authentication): Checking that a person is who they say they are, usually with a login.
- [Data governance](https://ecosystem.samcarlton.com/data-governance): The rules and responsibilities for how an organization's data is collected, stored, used and protected.
- [Multi-tenancy](https://ecosystem.samcarlton.com/multi-tenancy): One copy of a software system serving many customer organizations at once, with each one's data kept separate.

Map view: https://ecosystem.samcarlton.com/access-control