# Manage permissions of roles

1. To grant or deny certain permissions to a role, click *Permissions* link of the respective role.  A page displaying all permissions, grouped in categories, appears.
   * If a role has permission for a certain action, the system displays ![](https://www.progress.com/documentation/sitefinity-cms/assets/d4cdf7d9dc300f6b1d980534e6cd6c78/allow.png "allow") in column *Allow*.
   * If a role does not have permission for a certain action, nothing is displayed in column *Allow*.
   * If a role is explicitly denied permission for a certain action, the system displays a column *Deny* and displays ![](https://www.progress.com/documentation/sitefinity-cms/assets/5a246fabc253fce040194d851d9fb0d6/deny.png "deny") in the column.
   * For more information about implicit and explicit denial of permissions, see [Overview: Permissions](https://www.progress.com/documentation/sitefinity-cms/overview-permissions).
2. To change permissions of a role perform the procedure in [Administration: Permissions of users and roles](https://www.progress.com/documentation/sitefinity-cms/administration-permissions-of-users-and-roles) » *Step 4*.

   > info  **NOTE**: You cannot change the permission of the *Administrators* role.
3. When you finish, in the upper part of the page, click *Back to all items* link to return to *Roles* page.

When using Sitefinity CMS to manage multiple sites from the same backend (Multisite Management), the users, roles and permissions are global for the whole system, thus all sites share the same users, roles and permissions. You can controls which roles can access a particular site. For more information see: [Permissions for sites](https://www.progress.com/documentation/sitefinity-cms/edit-site-permissions).