---
"@context": https://schema.org
"@type": TechArticle
"@id": https://www.twilio.com/docs/iam/access-control/overview#article
headline: Access Control
description: Use Twilio role-based access control (RBAC) to grant granular access to resources. Manage role assignments and apply least-privilege access for users.
url: https://www.twilio.com/docs/iam/access-control/overview
inLanguage: en
dateModified: 2026-08-13T17:05:12.000Z
author:
  "@type": Organization
  name: Twilio Developer Education Team
publisher:
  "@type": Organization
  name: Twilio
---

# Access Control

With Twilio's role-based access control (RBAC) platform, you can grant access to Twilio resources in a granular way and prevent access to other resources. Twilio RBAC lets you adopt the security principle of "least privilege access" for users in your Twilio accounts.

The Access Control product provides the following key features:

* Control access to Twilio resources with [built-in roles](/docs/iam/access-control/types-of-roles) that range in scope from your whole organization down to viewing only a specific product for a specific subaccount.
* Manage role assignments across multiple accounts and subaccounts in one place using the self-serve RBAC management interface in Organization Settings (Twilio Console) or Twilio Admin (Legacy Console).

> \[!NOTE]
>
> RBAC is generally available in the [Twilio Console](https://1console.twilio.com) and available in public beta in the [Legacy Console](https://console.twilio.com).

Some of the improvements made to RBAC in the Twilio Console compared to the Legacy Console are:

* You can manage RBAC [built-in roles](/docs/iam/access-control/types-of-roles) on the [**Account settings** > **User management** > **User access**](https://1console.twilio.com/go?to=/account/__account__/settings/manage-user-access/active-users) page. This isn't supported in the Legacy Console.
* In addition to the existing built-in roles, new [built-in roles](/docs/iam/access-control/types-of-roles) are available for products such as Email, Memory, and Trust Hub.
* The Twilio Console doesn't have a separate role assignment page. All role assignments are on the [**User management**](https://1console.twilio.com/organization/settings/users/managed-users) page. To add or edit a user's role assignment, click a user under **Managed users**, then click the **Role assignments** tab.
* The Twilio Console moves the **Roles** page into a tab under [**User management**](https://1console.twilio.com/organization/settings/users/managed-users) page, replacing the standalone Access Control section that existed in the Legacy Console.
* The Twilio Console introduces resource-based roles. These provide more granular access by scoping permissions to specific resources rather than granting global access. You can assign Billing Group Admin and Billing Group Viewer roles to specific Billing Groups at the organization level.

## What's next?

* Explore [RBAC in the Twilio Console](/docs/iam/access-control/rbac-twilio-console).
* Explore [RBAC in the Legacy Console](/docs/iam/access-control/rbac-legacy-console).
* Explore [available Roles](/docs/iam/access-control/types-of-roles).
* Manage role assignments [using the REST API](/docs/iam/access-control/role-assignment-resource).
* Retrieve roles [using the REST API](/docs/iam/access-control/role-resource).