[Yandex Cloud documentation](../../index.md) > [Yandex Security Deck](../index.md) > [Access management](index.md) > VM roles

# Service roles for Vulnerability Management (VM)

With [Vulnerability Management](../concepts/vulnerability-management.md) (VM) service roles, you can manage user access to the VM resources and their settings, as well as to the vulnerability scanning results.

```mermaid
%%{init: {"flowchart": {'defaultRenderer': 'elk'}} }%%
flowchart BT
    vulnerability-manager.admin --> security-deck.admin
    vulnerability-manager.editor --> security-deck.editor
    vulnerability-manager.viewer --> security-deck.viewer
    vulnerability-manager.auditor --> security-deck.auditor

    security-deck.auditor --> security-deck.viewer
    security-deck.viewer --> security-deck.editor
    security-deck.editor --> security-deck.admin

    vulnerability-manager.editor --> vulnerability-manager.admin
    vulnerability-manager.viewer --> vulnerability-manager.editor
    vulnerability-manager.auditor --> vulnerability-manager.viewer

    security-deck.auditor ~~~ security-deck.admin
```

#### vulnerability-manager.auditor {#vulnerability-manager-auditor}

The `vulnerability-manager.auditor` role enables viewing [Vulnerability Management](../concepts/vulnerability-management.md) scan results.

#### vulnerability-manager.viewer {#vulnerability-manager-viewer}

The `vulnerability-manager.viewer` enables viewing info on [Vulnerability Management](../concepts/vulnerability-management.md) scan jobs and their results.

This role includes the `vulnerability-manager.auditor` permissions.

#### vulnerability-manager.editor {#vulnerability-manager-editor}

The `vulnerability-manager.editor` enables viewing info on [Vulnerability Management](../concepts/vulnerability-management.md) scan jobs, running and modifying them, as well as viewing their results.

This role includes the `vulnerability-manager.viewer` permissions.

#### vulnerability-manager.admin {#vulnerability-manager-admin}

The `vulnerability-manager.admin` role enables viewing info on [Vulnerability Management](../concepts/vulnerability-management.md) scan jobs, running and modifying them, as well as viewing their results.

This role includes the `vulnerability-manager.editor` permissions.