> For the complete documentation index, see [llms.txt](https://documentation.panomics.bio/documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.panomics.bio/documentation/access-control/overview/capabilities.md).

# What you can do with access control

* Group users into **Teams** and reuse them across resources.
* Grant precise, **resource-scoped** permissions.
* Inherit permissions from **parents to children** (e.g., Project → Analysis).
* Use **Deny** to override inherited **Allow**.
* Use **umbrella actions** (e.g., `read_project`) for simpler grants.
* Delegate **admin** on just the **children** of a resource.

## Common use cases

* **Make projects internal public** - Grant `read_project` to All Users team
* **Grant project-wide analysis access** - Use analysis actions at the project level
* **Auto-assign guests by domain** - Set up domain rules in Organization Settings
* **Delegate admin to children only** - Use Child Resource Permissions section
* **Restrict specific analyses** - Use Direct Deny on individual analyses
* **Create external collaborator access** - Grant analysis-specific permissions to external teams

{% hint style="info" %}
See [How-to / Common Recipes](/documentation/access-control/recipes.md) for step-by-step guides on all these use cases.
{% endhint %}