.. _access_profiles:

Access Profiles: Overview
-------------------------

Access profiles define model types that a user is permitted to access.
Access profiles are assigned to users via Roles.


.. note::

   Access Profiles (APs) are subject to the following requirements:
   
   * Default APs: adhere to the following hierarchy of permissions: **Provider > Reseller >  Customer > Site**. 
     For instance, default Customer APs have less permissions than Provider APs.
   * Cloned APs: the cloned AP has equal or less permissions than the AP of the admin
     user who creates the clone.
   
When a System Upgrade is performed, the default access profiles are updated in
accordance with the above.
   
.. note::

   Existing cloned APs are **not** upgraded. You have to manually update them, 
   or re-clone and modify them from the upgraded, default versions as needed.