keycloak-scim/docs/documentation/authorization_services/topics/permission-overview.adoc

[[_permission_overview]]
= Managing permissions

A permission associates the object being protected and the policies that must be evaluated to decide whether access should be granted.

After creating the resources you want to protect and the policies you want to use to protect these resources,
you can start managing permissions. To manage permissions, click the *Permissions* tab when editing a resource server.

.Permissions
image:images/permission/view.png[alt="Permissions"]

Permissions can be created to protect two main types of objects:

* *Resources*
* *Scopes*

To create a permission, select the permission type you want to create from the item list in the upper right corner of the permission listing. The following sections describe these two types of objects in more detail.