[Yandex Cloud documentation](../../index.md) > [Yandex Cloud Marketplace](../index.md) > Users > Access management

# User access management in Marketplace

In this section, you will learn about:
* [Resources supporting role assignment](#resources).
* [Roles this service has](#roles-list).

## Resources you can assign a role for {#resources}

You can assign a role to an [organization](../../organization/concepts/organization.md), [cloud](../../resource-manager/concepts/resources-hierarchy.md#cloud), or [folder](../../resource-manager/concepts/resources-hierarchy.md#folder). The roles assigned to organizations, clouds, and folders also apply to their nested resources.

## Roles this service has {#roles-list}

### Service roles {#service-roles}

#### license-manager.auditor {#license-manager-auditor}

The `license-manager.auditor` role enables viewing information on [subscriptions](../concepts/users/subscription.md).

#### license-manager.viewer {#license-manager-viewer}

The `license-manager.viewer` role enables viewing information on [subscriptions](../concepts/users/subscription.md) and their [links](../operations/users/lock-subscription.md) to a resource, app, or service.

This role includes the `license-manager.auditor` permissions.

#### license-manager.user {#license-manager-user}

The `license-manager.user` role enables managing subscriptions, as well as viewing information on those and their links to resources, apps, or services.

Users with this role can:
* View information on [subscriptions](../concepts/users/subscription.md) and their links to resources, apps, or services.
* [Buy](../operations/users/buy-subscription.md) subscriptions.
* [Disable](../operations/users/cancel-subscription.md) subscription auto-renew.
* [Link](../operations/users/lock-subscription.md) subscriptions to resources, apps, and services, as well as [unlink](../operations/users/unlock-subscription.md) them.
* [Move](../operations/users/move-subscription.md) subscriptions from one folder to another.

This role includes the `license-manager.viewer` permissions.

#### license-manager.subscriptionAgent {#license-manager-subscriptionAgent}

The `license-manager.subscriptionAgent` role enables [linking](../operations/users/lock-subscription.md) subscriptions to resources, apps, or services, as well as viewing info on [subscriptions](../concepts/users/subscription.md) and their links to resources, apps, or services.

#### marketplace.productInstances.auditor {#marketplace-productInstances-auditor}

The `marketplace.productInstances.auditor` role enables viewing info on installed Marketplace [products](../concepts/product.md) and [access permissions](../../iam/concepts/access-control/index.md) granted for them, as well as viewing [folder](../../resource-manager/concepts/resources-hierarchy.md#folder) metadata.

#### marketplace.productInstances.viewer {#marketplace-productInstances-viewer}

The `marketplace.productInstances.viewer` role enables enables viewing info on installed Marketplace [products](../concepts/product.md), [access permissions](../../iam/concepts/access-control/index.md) granted for them, and on the relevant [folder](../../resource-manager/concepts/resources-hierarchy.md#folder).

This role includes the `marketplace.productInstances.auditor` permissions.

#### marketplace.productInstances.user {#marketplace-productInstances-user}

The `marketplace.productInstances.user` role enables viewing info on installed Marketplace [products](../concepts/product.md), activating and deactivating them, as well as viewing info on [access permissions](../../iam/concepts/access-control/index.md) granted for them and on the relevant [folder](../../resource-manager/concepts/resources-hierarchy.md#folder).

This role includes the `marketplace.productInstances.viewer` permissions.

#### marketplace.productInstances.editor {#marketplace-productInstances-editor}

The `marketplace.productInstances.editor` role enables managing installed Marketplace products.

Users with this role can:
* View info on installed Marketplace [products](../concepts/product.md) and [access permissions](../../iam/concepts/access-control/index.md) granted for them.
* Create Marketplace products, modify their metadata, as well as activate and deactivate Marketplace products.
* View info on the relevant [folder](../../resource-manager/concepts/resources-hierarchy.md#folder).

This role includes the `marketplace.productInstances.user` permissions.

#### marketplace.productInstances.admin {#marketplace-productInstances-admin}

The `marketplace.productInstances.admin` role enables managing installed Marketplace products and access to them.

Users with this role can:
* View info on installed Marketplace [products](../concepts/product.md).
* View info on [access permissions](../../iam/concepts/access-control/index.md) granted for installed Marketplace products and modify such permissions.
* Create Marketplace products, modify their metadata, as well as activate and deactivate Marketplace products.
* View info on the relevant [folder](../../resource-manager/concepts/resources-hierarchy.md#folder).

This role includes the `marketplace.productInstances.editor` permissions.