---
title: "Roles & access"
description: "What a person or a key may DO, and which addresses they may do it to. Two axes, two resources, and both have to agree before a message goes out."
url: "https://openemail.uk/docs/api/roles"
area: "API"
category: "Roles & access"
---

# Roles & access

What a person or a key may DO, and which addresses they may do it to. Two axes, two resources, and both have to agree before a message goes out.

## In this section

- [List roles](https://openemail.uk/docs/api/roles/list.md): Every role, built-ins first, and who holds each.
- [Create a role](https://openemail.uk/docs/api/roles/create.md): A name and a list of permissions.
- [Retrieve a role](https://openemail.uk/docs/api/roles/get.md): One role in full.
- [Update a role](https://openemail.uk/docs/api/roles/update.md): `permissions` replaces the whole list.
- [Delete a role](https://openemail.uk/docs/api/roles/delete.md): Any role but the owner, once you say where its holders go.
- [List permissions](https://openemail.uk/docs/api/roles/permissions.md): The vocabulary, and which entries a key may hold.
- [List members](https://openemail.uk/docs/api/members/list.md): Everybody here, with their role and their addresses.
- [Add a member](https://openemail.uk/docs/api/members/add.md): By email, with a role, and optionally addresses.
- [Retrieve a member](https://openemail.uk/docs/api/members/get.md): One person, by account id.
- [Change a member’s role](https://openemail.uk/docs/api/members/update.md): The role, and nothing else.
- [Remove a member](https://openemail.uk/docs/api/members/remove.md): The role and every grant, together.
- [Grant and revoke an address](https://openemail.uk/docs/api/members/addresses.md): The second axis, one address at a time.
- [Scopes](https://openemail.uk/docs/api/scopes.md): How a role caps a key: scopes ∩ permissions.