keycloak-scim/topics/permission/overview.adoc

== Managing Permissions

A permission associates the object being protected and the policies that must be evaluated in order to decide whether access should be granted or not.

After creating the resources you want to protect and the policies you want to use to actually protect these resources,
you can start managing permissions. For that, click on the *Permissions* tab when editing a resource server.

.Permissions
image:../../images/permission/view.png[alt="Permissions"]

Permissions can be created to protect two main types of objects:

* *Resource*
* *Scope*

To create a permission, select the permission type you want to create from the dropdown located in the right upper corner of the permission listing. The following sections describe these two types in more detail.