> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/harness-ai/use-harness-platform/connectors/manage-access-control-for-connectors.md).
# Manage access control for connectors
Learn how to manage access control for connectors by type, name, or tags.
{% hint style="info" %}
This feature is in Beta[^1] and requires enablement. [View all early access features.](/release-notes/features.md)
{% @harness-feature-flag-access/request-feature-flag-access module="platform" pagePath="platform/use-harness-platform/connectors/manage-access-control-for-connectors" featureFlags="%5B%7B%22name%22%3A%22Tag-based%20access%20to%20connectors%22%2C%22key%22%3A%22PL\_TAG\_BASED\_ACCESS\_TO\_CONNECTORS%22%2C%22status%22%3A%22BETA%22%2C%22description%22%3A%22Enables%20the%20By%20Tag%20option%20in%20a%20resource%20group%2C%20so%20you%20can%20grant%20access%20to%20connectors%20based%20on%20matching%20tags%20instead%20of%20listing%20each%20connector%20individually.%22%7D%5D" %}
{% endhint %}
[Role-based access control (RBAC)](/harness-ai/use-harness-platform/platform-access-control.md) in Harness helps you manage access to connectors by defining who can access them, what actions they can perform, and where those actions are allowed. Access is controlled through roles assigned to users, user groups, and service accounts.
***
## What you will learn from this topic
* How to [configure a role](#configure-roles) with connector permissions.
* How to [configure a resource group](#configure-resource-groups) scoped to connectors by type, tag, or specific connector.
* How to [assign the role and resource group](#assign-access-control-for-connectors) to a user, user group, or service account.
***
## Before you begin
Before you manage access control for connectors, ensure you have the following:
* **Account Admin permissions**: Permissions to modify access control settings at the Account level. Go to [Role-based access control (RBAC) in Harness](/harness-ai/use-harness-platform/platform-access-control.md) for more information on role requirements.
* **Understanding of resource groups**: Knowledge of how resource groups work in Harness. Go to [Manage resource groups](/harness-ai/use-harness-platform/platform-access-control/manage-resource-groups.md) for more information.
* **Connectors overview**: Understanding of what connectors are and how they work in Harness before you configure access control. Go to [Connectors](/harness-ai/use-harness-platform/connectors.md) for an overview of connector types.
***
## Configure roles
Perform the following steps to configure a role with connector permissions:
1. Navigate to **Account Settings** -> **Access Control** -> **Roles**.
2. [Add or edit a role](/harness-ai/use-harness-platform/platform-access-control/add-manage-roles.md).
3. In the role, check the **Shared Resources** -> **Connectors** section to ensure the appropriate permissions are granted, as shown in the following image.
***
## Configure resource groups
Perform the following steps to configure a resource group scoped to connectors:
1. Go to **Account Settings** -> **Access Control** -> **Resource Groups**.
2. [Create or edit a resource group](/harness-ai/use-harness-platform/platform-access-control/manage-resource-groups.md).
3. Select the appropriate **Resource Scope** based on your requirements.
4. Set **Resource** to **All** to provide access to all resources, or select **Specified** to scope access to specific resources, as shown in the following image.
5. After you specify the resources, search for **Shared Resources** and select **Connectors**. You can add connectors to a resource group in one of the following four ways:
* **All**: Provides access to all connectors at a particular resource scope.
* **By Type**: Grants access to one or more specific connector types, such as artifact repositories, cloud providers, and secret managers, based on your selection.
* **By Tag**: Grants access to connectors based on matching tags. If a connector has a tag included in the resource group's tag list, users with the corresponding role assignments automatically gain access. If the tag is removed from the connector, access is automatically revoked.
* **Specified**: Grants access to one or more specific connectors that already exist. This option is available only at the Account-only, Organization-only, or Project-only scopes.
By configuring resource groups this way, you can manage connector access in four different ways, providing granular access control.
***
## Assign access control for connectors
After you configure the resource group for connectors, assign the [role binding to a principal](/harness-ai/use-harness-platform/platform-access-control.md#principals).
For example, to assign access to a user, navigate to **Account Settings** -> **Access Control** -> **Users**. For the relevant user, select **Manage Role Bindings**, and then select the role and resource group you created.
***
## Next steps
* [Add and manage roles](/harness-ai/use-harness-platform/platform-access-control/add-manage-roles.md): Create custom roles or edit built-in roles.
* [Manage resource groups](/harness-ai/use-harness-platform/platform-access-control/manage-resource-groups.md): Scope resource groups to specific resources.
* [Role-based access control (RBAC) in Harness](/harness-ai/use-harness-platform/platform-access-control.md): Understand roles, resource groups, and principals.
{% @harness-feedback/feedback module="harness-ai" pagePath="harness-ai/use-harness-platform/connectors/manage-access-control-for-connectors" %}
[^1]: Beta features are feature-complete but still being validated. Available on request.