> ## Documentation Index
> Fetch the complete documentation index at: https://docs.e6data.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security overview

> An index of e6data identity, access control, token, SSO, TLS, and support-access documentation.

* [Identity and RBAC](/platform/identity): How e6data controls who can access your platform and what they can do, across the Control Plane and the Compute Plane.
* [Control Plane vs Compute Plane permissions](/platform/identity/control-plane-vs-compute-plane): The two permission grammars in e6data - Control Plane named permissions and Compute Plane resource-and-action rules - and how roles and bindings compose them.
* [Users, groups, and service accounts](/platform/identity/users-groups-service-accounts): How human users, groups, and service accounts are created, synced to workspaces, and managed in e6data.
* [Roles and permissions](/platform/identity/roles-and-permissions): The built-in Admin, Manager, and Viewer roles, what each can do, and how to design custom roles in e6data.
* [Personal access tokens and service account keys](/platform/tokens/pat-and-service-account-keys): The two e6data credential types in detail - personal access tokens and service account keys - their formats and when to use each.
* [Create, use, rotate, and revoke tokens](/platform/tokens/create-rotate-revoke): Create personal access tokens and service account API keys, use them over REST and JDBC/ODBC, set an expiry, rotate, and revoke them.
* [Token security best practices](/platform/tokens/best-practices): How to store e6data tokens safely, scope them with least privilege, revoke them, manage them as an admin, and understand what the audit trail records.
* [SSO setup](/platform/sso/setup): Connect your identity provider to e6data via SAML 2.0 or OIDC so members sign in with corporate credentials, with just-in-time provisioning.
* [Domain auto-join and JIT provisioning](/platform/identity/domain-auto-join-and-jit): Let users join your organization automatically by email domain, and provision SSO users just-in-time on first sign-in.
* [TLS certificates](/platform/identity/tls-certificates): How TLS certificates work for e6data endpoints - Serverless (managed by e6data) vs In-VPC (managed by you).
* [Enable, audit, and block support access](/platform/support-access/enable-audit-block): Add, block, unblock, and list e6data Support Users over the API, the permissions required, and how their actions appear in your audit log.
* [Privacy controls](/platform/support-access/privacy-controls): The per-tenant alias model behind e6data Support Users - how identities stay private, how audit history stays correct, and the security guarantees.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.