boundary/website/content/docs/concepts/domain-model/roles.mdx

---
layout: docs
page_title: Domain Model - Roles
description: |-
  The anatomy of a Boundary role
---

# Roles

A role is a resource
that contains a collection of [permissions][]
which are granted to any principal assigned to the role.
[Users][], [groups][], and [managed groups][] are principals
which allows either to be assigned to a role.
A role can be defined within any [scope][].
A role can be assigned to principals from any scope.

## Attributes

A role has the following configurable attributes:

- `name` - (optional)
  If set, the `name` must be unique within the role's [project][].

- `description` - (optional)

## Referenced By

- [Group][]
- [Managed Group][]
- [Project][]
- [User][]

[group]: /boundary/docs/concepts/domain-model/groups
[groups]: /boundary/docs/concepts/domain-model/groups
[managed group]: /boundary/docs/concepts/domain-model/managed-groups
[managed groups]: /boundary/docs/concepts/domain-model/managed-groups
[permissions]: /boundary/docs/concepts/security/permissions
[project]: /boundary/docs/concepts/domain-model/scopes#projects
[scope]: /boundary/docs/concepts/domain-model/scopes
[user]: /boundary/docs/concepts/domain-model/users
[users]: /boundary/docs/concepts/domain-model/users

## Service API Docs

The following services are relevant to this resource:

- [Role Service](/boundary/api-docs/role-service)

## Tutorial

Refer to the [Managed Roles and Permissions with HCP Boundary](/boundary/tutorials/hcp-administration/hcp-manage-roles) tutorial to learn how to create a role in Boundary.