# Role-based Access Control (RBAC) on Confluent Cloud Confluent Cloud role-based access control (RBAC) lets you control access to an organization, environment, cluster, or granular Kafka resources (topics, consumer groups, and transactional IDs), Schema Registry resources, and ksqlDB resources based on predefined roles and access permissions. Use RBAC to protect your Confluent Cloud resources and data by authorizing and restricting access to [principals](../../../_glossary.md#term-principal) and by delegating access authorization to the appropriate business units and teams in your organization. ## Key concepts Before diving into RBAC implementation, understand these key concepts: * [Organizations](../hierarchy/organizations/cloud-organization.md#cloud-organization) * [Environments](../hierarchy/cloud-environments.md#cloud-environments) * [User accounts](../../authenticate/user-identities/user-accounts/overview.md#user-accounts) * [Service accounts](../../authenticate/workload-identities/service-accounts/overview.md#service-accounts) * [Networks](../../../networking/overview.md#cloud-networking) * [Resource hierarchy](../hierarchy/overview.md#resource-hierarchy-overview) * [Access control lists (ACLs)](../acls/overview.md#acl-overview) * [Authorizing Using RBAC and ACLs [Confluent Developer video]](https://developer.confluent.io/learn-kafka/cloud-security/rbac-and-acls/) ## Component-specific RBAC For details on component-specific RBAC, see the following topics: * [Flink RBAC](../../../flink/operate-and-deploy/flink-rbac.md#flink-rbac) - Manage access to Flink resources and compute pools * [ksqlDB RBAC](../../../ksqldb/ksqldb-ccloud-rbac.md#ksqldb-ccloud-rbac) - Control access to ksqlDB clusters and queries * [Schema Registry RBAC](../../../sr/schemas-manage.md#cloud-sr-rbac) - Manage schema access and compatibility * [Stream Catalog RBAC](../../../stream-governance/stream-catalog.md#stream-catalog-rbac) - Control access to data discovery and metadata * [Stream Lineage RBAC](../../../stream-governance/stream-lineage.md#stream-lineage-rbac) - Manage access to data lineage views * [Managed Connectors RBAC](../../../connectors/managed-connector-rbac.md#managed-connector-rbac) - Control connector operations and configurations For a complete list of resources that support RBAC, see [RBAC by component](manage-role-bindings.md#cloud-rbac-resources-per-components).