# Users and roles

<dl class="api-definition">
<dt>Concept</dt>
<dd><a href="/docs/development/opcua/security/users-roles">Users and roles</a></dd>
</dl>

| Type | Description |
|---|---|
| [OpcAccessControlEntry](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcaccesscontrolentry/) | Represents the access control settings of a single [OpcPrincipal](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcprincipal/) in an [OpcAccessControlList](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcaccesscontrollist/): the operations allowed or denied and the endpoints enabled or disabled for the principal. |
| [OpcCertificateIdentityTokenInfo](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opccertificateidentitytokeninfo/) | Describes an identity a client stated by a certificate. |
| [OpcIdentityTokenInfo](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcidentitytokeninfo/) | Describes the identity a client stated, without any secret it stated along with it. |
| [OpcPermissions](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcpermissions/) | Specifies the operations a role is permitted to perform on a node (OPC 10000-3, PermissionType). |
| [OpcRolePermission](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcrolepermission/) | Describes the operations a role is permitted to perform on a node, as stated by the [RolePermissions](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcattribute/#rolepermissions) and [UserRolePermissions](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcattribute/#userrolepermissions) of the node (OPC 10000-3, RolePermissionType). |
| [OpcServer](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcserver/) | Represents an OPC UA server which provides the address space defined by its [NodeManagers](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcserver/members#nodemanagers) to its clients. |
| [OpcSession](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.server.opcsession/) | Represents a session which a client has created on the server. |
| [OpcUserNameIdentityTokenInfo](https://www.traeger.de/en/docs/development/opcua/api/v2.59/opc.uafx.opcusernameidentitytokeninfo/) | Describes an identity a client stated by a user name, without its password. |