> ## Documentation Index
> Fetch the complete documentation index at: https://docs.get2dial.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Permissions matrix

> The default capability level — none, read, or write — for every resource area, broken down by built-in role.

The default capability level for every resource area, by built-in role. See [Roles and
permissions](/account/roles-and-permissions) for how capabilities work and how to override
them per user or with a custom role.

## Defaults by role

| Resource area    | Agent | Supervisor | Admin |
| ---------------- | ----- | ---------- | ----- |
| Agents           | None  | Read       | Write |
| API keys         | None  | None       | Write |
| Audio library    | None  | Write      | Write |
| Campaigns        | None  | None       | Write |
| Carriers         | None  | None       | Write |
| CDRs             | Read  | Read       | Read  |
| Certificates     | None  | None       | Write |
| CRM              | None  | None       | Write |
| Dispositions     | None  | Read       | Write |
| DNC              | None  | None       | Write |
| IVR              | None  | None       | Write |
| Lead resets      | None  | Write      | Write |
| Leads            | None  | Read       | Write |
| Live monitoring  | None  | Write      | Write |
| Mail             | None  | None       | Write |
| Nodes            | None  | None       | Read  |
| Numbers          | None  | None       | Write |
| Outbound routes  | None  | None       | Write |
| QA               | None  | Write      | Write |
| Queues           | None  | Read       | Write |
| Recordings       | None  | Read       | Read  |
| Report schedules | None  | None       | Write |
| Roles            | None  | None       | Write |
| Routing          | None  | None       | Write |
| Scripts          | None  | None       | Write |
| Security         | None  | None       | Write |
| SIP domains      | None  | None       | Write |
| Subscribers      | None  | None       | Write |
| Users            | None  | None       | Write |
| Voicemail        | None  | Read       | Write |
| Webhooks         | None  | None       | Write |

<Note>
  Admin holds read, not write, on CDRs and recordings — even an admin can't edit or delete a
  call record or recording through the product; both are read-only across every role.
</Note>

## Related

<CardGroup cols={2}>
  <Card title="Roles and permissions" href="/account/roles-and-permissions" />

  <Card title="Security controls" href="/compliance/security-controls" />
</CardGroup>