> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/role-based-access-control-for-zuora-tenants/roles-and-permissions-management-advanced/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://zuora.ferndocs.com/_mcp/server.

# Roles and permissions management (Advanced)

## Docs

- [Billing roles and permission mangement](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/role-based-access-control-for-zuora-tenants/roles-and-permissions-management-advanced/zuora-oneid-unified-permission-management-for-zuora-billing.md): Introduces the centralized management of user roles, permissions, and access controls across Zuora Billing tenants from Zuora OneID
- [Add user roles for Billing tenants in OneID](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/role-based-access-control-for-zuora-tenants/roles-and-permissions-management-advanced/zuora-oneid-unified-permission-management-for-zuora-billing/add-user-roles-in-oneid.md): Add user roles in the OneID Admin Console for Billing and Zephr tenants to control the access and permissions that are available to users for a selected product and tenant.
- [Add user roles for Zephr tenants in OneID](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/role-based-access-control-for-zuora-tenants/roles-and-permissions-management-advanced/add-user-roles-for-zephr-tenants-in-oneid.md): Create a new Zephr-specific user role for a selected tenant in OneID.
- [Update user role permissions in OneID](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/role-based-access-control-for-zuora-tenants/roles-and-permissions-management-advanced/edit-permissions-for-a-tenant-in-oneid.md): Update an existing user role in the OneID Admin Console when you need to change the entity, tenant type, creator, or permission assignments for that role.
- [Tenant type and modular categories](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/role-based-access-control-for-zuora-tenants/roles-and-permissions-management-advanced/permissions.md): Review the modular categories that each tenant type supports so that you can assign the appropriate permissions to user roles in your Zuora environment.
- [Clone user roles and permissions in OneID](https://zuora.ferndocs.com/docs/platform/security-and-identity/oneid-identity-and-access-management/role-based-access-control-for-zuora-tenants/roles-and-permissions-management-advanced/clone-user-roles-and-permissions-in-oneid.md): Clone an existing role in OneID to create a new role with similar permissions.