> For the complete documentation index, see [llms.txt](https://learn.capstorm.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://learn.capstorm.com/capstorm-container/reference/user-security.md).

# User Security

The Access Control tab is used to configure access control/authorization for core CapStorm applications (CopyStorm, CopyStorm/Medic, CopyStorm/Restore, and CopyStorm/Director). The Access Control editor table can be used to add new and edit existing CapStorm application users and assign pre-defined roles to users. These pre-defined roles will determine the level of access (available functionality) granted to the assigned user when using the aforementioned supported applications.

## Step 1: Add a User

Click on the “Add User…” button.

![](/files/wynclsz2aAhlZn8sBcmU)

This will open a pop-up dialog where you can enter the following:

* Username — a unique username.
* Password — a strong password.
* Role — Three pre-defined roles are available:
  * Super Admin — a top-level administrative role. A user with this role can perform any operation in any application **including** *configuration of Access Control.*
  * Admin — a slightly restricted administrative role. A user with this role can perform any operation in any application **except** *configuration of Access Control.*
  * Configurator — a user with this role can edit configurations for all applications **except** CopyStorm/Director, but cannot invoke any of the applications (cannot run jobs).
* Production Enabled — this checkbox determines whether the user will be granted Access against Production Salesforce Instances.
  * The “Production Enabled” check-box will enable/disable any operation that is allowed by the assigned role against a production database or Salesforce org. For example:
    * A user that has been assigned the “Configurator” role but has the “Production Enabled” check-box *unchecked* **cannot** edit a production configuration.

Then click the “Save” button to add the user.

![](/files/pTGElWT5TTfs3Qj52HsI)

## Step 3: Save Changes

When you are finished making changes to the Access Control configuration, click the “Save” button at the bottom of the editor table. A pop-up dialog will appear where you can validate and save or cancel all staged changes.

![](/files/OpIh1znY9MDdDjZ8waei)

You can also undo all staged changes by clicking the “Cancel” button.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://learn.capstorm.com/capstorm-container/reference/user-security.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.