# Expanded Role\-Based Access Control \(RBAC\) for Enterprise teams

**Published:** October 10, 2025 | **Authors:** Bel Curcio, Javier Bórquez, Enric Pallerols, Christopher Skillicorn

---

Vercel’s Role-Based Access Control (RBAC) system now supports multiple roles per user and introduces extended permissions for finer-grained access control across Enterprise teams.

What’s new:

- **Multi-role support:** Assign multiple roles to a single user within Enterprise teams.
- **Security role:** A new team role dedicated to managing security and compliance settings.
- **Extended permissions:** Add granular capabilities that layer on top of team and project roles for precise control.
- **Access groups integration:** Access Groups now support team roles and extended permissions in Directory Sync mappings.

The new extended permissions include:

- **Create Project:** Create new projects.
- **Full Production Deployment:** Deploy, rollback, and promote to production.
- **Usage Viewer:** View usage, prices, and invoices (read-only).
- **Integration Manager:** Install and manage integrations and storage.
- **Environment Manager:** Create and manage project environments.
- **Environment Variable Manager:** Create and manage environment variables.

Extended permissions apply when paired with a compatible team role.

Learn more in the [Role-Based Access Control documentation.](https://vercel.com/docs/rbac/access-roles/extended-permissions)

---

📚 **More updates:** [View all changelog entries](/changelog/sitemap.md) | [Blog](/blog/sitemap.md)