[Yandex Cloud documentation](../../index.md) > [Yandex MetaData Hub](../index.md) > Schema Registry > Service roles for access management

# Service roles for managing data schemas using Schema Registry



{% note info %}

This feature is in the [Preview](../../overview/concepts/launch-stages.md) stage.

{% endnote %}



With Schema Registry service roles, you can view namespaces, subjects, and schemas in a schema registry, as well as create, edit, and delete namespaces and schemas.

```mermaid
%%{ init: "flowchart": { "defaultRenderer": "elk" } }%%
flowchart BT
    schema-registry.auditor --> schema-registry.viewer
    schema-registry.viewer --> schema-registry.editor
    schema-registry.editor --> schema-registry.admin
```

### schema-registry.auditor {#schema-registry-auditor}

The `schema-registry.auditor` role enables viewing information on [namespaces](../concepts/schema-registry.md#namespace).

### schema-registry.viewer {#schema-registry-viewer}

The `schema-registry.viewer` role enables viewing info on [schemas](../concepts/schema-registry.md#schema) and [namespaces](../concepts/schema-registry.md#namespace) and comparing schema versions.

This role includes the `schema-registry.auditor` permissions.

### schema-registry.editor {#schema-registry-editor}

The `schema-registry.editor` role enables managing schemas and namespaces.

Users with this role can:
* View info on [schemas](../concepts/schema-registry.md#schema), create, modify, and delete them, and compare schema versions.
* View info on [namespaces](../concepts/schema-registry.md#namespace) and create, modify, and delete them.

This role includes the `schema-registry.viewer` permissions.

### schema-registry.admin {#schema-registry-admin}

The `schema-registry.admin` role enables managing Schema Registry, as well as schemas and namespaces.

Users with this role can:
* View info on [schemas](../concepts/schema-registry.md#schema), create, modify, and delete them, and compare schema versions.
* View info on [namespaces](../concepts/schema-registry.md#namespace) and create, modify, and delete them.

This role includes the `schema-registry.editor` permissions.

## What roles do I need {#choosing-roles}

The table below lists the roles required for specific actions. You can always assign a role with more permissions. For example, you can assign the `editor` role instead of `viewer`.

| Action                        | Required roles          |
|---------------------------------|---------------------------|
| Viewing namespaces | `schema-registry.auditor` |
| Viewing subjects          | `schema-registry.viewer`  |
| Viewing schemas             | `schema-registry.viewer`  |
| Comparing schema versions          | `schema-registry.viewer`  |
| Creating namespaces     | `schema-registry.editor`  |
| Creating schemas                 | `schema-registry.editor`  |
| Editing namespaces | `schema-registry.editor`  |
| Editing schemas             | `schema-registry.editor`  |
| Deleting namespaces       | `schema-registry.editor`  |
| Deleting schemas                   | `schema-registry.editor`  |