/tags/security/Recent content in Security on Layer5 DocumentationHugoen/cloud/reference/security/Mon, 01 Jan 0001 00:00:00 +0000/cloud/reference/security/<p>This page states how keys, keychains, tokens, and sessions behave, exactly, as of Layer5 Cloud v1.0.278. For the model, read the <a href="/cloud/concepts/identity-and-security/keys/">Keys</a>, <a href="/cloud/concepts/identity-and-security/keychains/">Keychains</a>, <a href="/cloud/concepts/identity-and-security/sessions/">Sessions</a>, and <a href="/cloud/concepts/identity-and-security/tokens/">Tokens</a> concepts. For tasks, use the <a href="/cloud/guides/security/">security guides</a>. For base URL, authentication, and the organization header, see the <a href="/cloud/reference/api-reference/">Cloud API</a>. All paths below sit under <code>/api</code> unless noted.</p> <h2 id="permission-keys" class="heading-link"> Permission keys <a href="#permission-keys" class="heading-anchor" aria-label="Permalink to this heading">🔗</a> </h2> <p>Provider Admin holds every key. The table lists the default holders of the other roles. &ldquo;Interface&rdquo; means the control or tab is disabled or replaced by a permission error screen. &ldquo;Server&rdquo; means the Layer5 Cloud server refuses the request with HTTP 403.</p>