# Roles

[In this section](https://my.tuna.am/team_roles) you can create access roles to differentiate user permissions in the team.

![team_roles](/en/assets/images/team_roles-95216624e6e5412fae22205348d9dd29.png)

tip

This section is available to the **Founder**, **Owners** and **Administrators**.

### Overview

Roles can restrict the use of certain types of tunnels, by default all types are available to all users, or allow access to bastion servers.

After adding a role, it must be applied to a [user](https://tuna.am/en/docs/team/members.md).

![](/docs/img/team/team_role_add_1.png) ![](/docs/img/team/team_role_view_1.png)