> ## Documentation Index > Fetch the complete documentation index at: https://agno-v2.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Roles > Default and custom roles in the AgentOS control plane. Roles are named bundles of scopes assigned to users. Members inherit the scopes of every role assigned to them. > [!NOTE] > > The roles on this page are managed in the [AgentOS control plane](https://os.agno.com). If you're running [self-hosted](https://agno-v2.mintlify.site/agent-os/security/authorization/self-hosted.md), define roles in your identity provider or backend and include the appropriate scopes in the JWT. ## Default Roles The AgentOS control plane provides three default roles for organization members. | Capability | Owner | Administrator | Member | | - | :-: | :-: | :-: | | Run agents, teams, workflows | ✓ | ✓ | ✓ | | Create and update AgentOS resources | ✓ | ✓ | ✓ | | Delete AgentOS resources | ✓ | ✓ | | | Create and update AgentOS instances | ✓ | ✓ | ✓ | | Delete AgentOS instances | ✓ | | | | Manage members and roles | ✓ | ✓ | | | Update organization settings | ✓ | ✓ | | | View billing | ✓ | ✓ | ✓ | | Update billing | ✓ | | | | Delete the organization | ✓ | | | ## Custom Roles > [!NOTE] > > Custom roles and scopes are available on the Enterprise plan. [Book a call](https://cal.com/team/agno/intro) or email [support@agno.com](mailto:support@agno.com) to enable. > [!WARNING] > > Custom roles require JWT authentication. Without it, scope enforcement is skipped entirely by AgentOS and assigned roles have no effect. Compose scopes into named roles in the AgentOS control plane and assign them to users in your organization. ### Create a Custom Role 1. Open the [Roles page](https://os.agno.com/settings/roles) in the control plane. 2. Define a role name and select the scopes it grants. 3. Save the role. ### Assign a Role to a User Open the [Organization settings page](https://os.agno.com/settings/organization) and assign the role to a user.