# Schema Registry Security Plugin for Confluent Platform This is a commercial component of Confluent Platform. With RBAC enabled, Schema Registry can authenticate incoming requests and authorize them based on role bindings. This allows schema evolution management to be restricted to administrative users, while providing users and applications with different types of access to a subset of subjects for which they are authorized (such as, write access to relevant subjects for producers, read access for consumers). The Schema Registry plugin supports authorization for both role-based access control (RBAC) and ACLs, and you can configure it to use either or both. If both are configured, then requests are authorized by way of a logical `OR`. In other words, a request that is only authorized by RBAC or ACLs is still considered valid.