# Configure access

By default, users do not have access to Resource Management, with the exception of [project usage](#project-usage). Access is managed through Control Panel [enrollment permissions](../../administration/enrollments-and-organizations-permissions/index.md) and [workspaces](../../administration/configure-workspaces/index.md), and both must be configured for a user to have access.

There are two [roles](../../administration/enrollments-and-organizations-permissions/index.md#roles) in enrollment permissions that control access to Resource Management: **Resource management viewer** and **Resource management administrator**.

* **Resource management viewer** allows users to view usage and resource allocation.
* **Resource management administrator** additionally allows users to change resource allocation by creating [Resource Queues](../resource-queues/index.md#create-resource-queues) and allocating projects to [usage accounts](../ecosystem/index.md).

For more details on the associated workflows, view details on the roles in Control Panel. A user needs to have one of these roles in order to view usage data in Resource Management.

Viewing [Foundry usage and limits](../foundry-usage-and-limits/index.md) also requires the **Read usage metrics** operation, with identifier `limitsservice:read-usage-metrics`. This operation is granted by default through the following roles:

* At the enrollment level: **Resource management viewer** (`enrollment:resource-management-viewer`)
* At the organization level: **Organization administrator** (`organization:administrator`)

The **Foundry usage & limits** page is hidden when a user does not have this operation.

Resource Management is part of the **Support** workspace in the **Application access** page of Control Panel. A user must have access to the **Resource management** application in this workspace to successfully view or use the application.

## Project usage

Access to the [**Project usage**](../project-usage/index.md) page is governed by the security operation "View project usage in Resource Management", with identifier `usage-aggregator:view-project-usage`.

By default, this operation is granted to users with the `Owner` role on the project, but administrators can configure access by [managing roles](../../platform-security-management/manage-roles/index.md) in Foundry Settings.