> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vidocsecurity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Navigation and roles

> Sign in to the Vidoc web app, move between organizations and projects, and learn what each role can do.

The Vidoc web app is for AppSec teams, administrators, and other users who manage findings. Developers usually see Vidoc in pull request (PR) comments. Refer to [Pull request reviews](/pull-requests/overview).

## Sign in

Open [app.vidoc.dev](https://app.vidoc.dev) or your custom deployment URL. For an on-premises installation, use the web app URL from your admin. Follow the sign-in steps for your deployment:

<Tabs>
  <Tab title="Vidoc Cloud">
    1. Open [https://app.vidoc.dev](https://app.vidoc.dev).
    2. Sign in with a passwordless email link or with Google. Vidoc accepts only verified email addresses.
    3. If you have no organization, Vidoc starts the onboarding. You create an organization and become its admin. Refer to [Quickstart](/quickstart).

    If another user invited you, Vidoc shows **You've been invited**. Click **Accept** to join the organization, or **Decline** to create your own organization.
  </Tab>

  <Tab title="Self-hosted">
    1. Open the web app of your installation, for example `https://app.<your-domain>`.
    2. Sign in with your company account (SSO).

    At the first sign-in, Vidoc adds you to the organization and to the default project with the **Developer** role. The operators of your installation set the first admin. To get more permissions, ask a Vidoc admin.
  </Tab>
</Tabs>

## Organizations and projects

An **organization** contains your users, your source code platform connections, and your projects. A **project** contains repositories, findings, and Memory. Most pages show the data of the current project.

* **Vidoc Cloud:** you can be a member of more than one organization. To go to a different organization, open the user menu and click **Change organization**. When you get an invitation to one more organization, a banner shows **Review**.
* **Self-hosted:** the installation has one organization.

To select a project, use the project switcher at the top of the sidebar. The same menu has these items:

| Item               | What it does                                                                                         | Who can use it           |
| ------------------ | ---------------------------------------------------------------------------------------------------- | ------------------------ |
| **Create project** | Creates an empty project.                                                                            | Admin, Security Engineer |
| **API keys**       | Opens the API keys of the current project. Refer to [Settings](/web-app/settings#api-keys).          | All roles                |
| **Delete project** | Deletes the project and all its repositories. Vidoc cancels the running scans of these repositories. | Admin                    |

## Sidebar

| Group              | Items                                                           |
| ------------------ | --------------------------------------------------------------- |
| **Workspace**      | **Pull requests**, **Repositories**                             |
| **Audit**          | **Findings**, **Insights**                                      |
| **Vidoc AI**       | **AI Chat**, **Memory**                                         |
| **Recent chats**   | Your AI Chat conversations. Use the search icon to find a chat. |
| **Settings**       | Opens the **Integrations** page.                                |
| User menu (bottom) | Your account and the organization settings.                     |

<Info>
  Findings, Insights, AI Chat, and Memory need the Enterprise plan on Vidoc Cloud. Included in self-hosted installations. On other plans, the sidebar shows these items in an **Enterprise only** group, and you cannot open them.
</Info>

The user menu shows only the items that your role and your deployment allow:

* **Account:** **SCM usernames**.
* **Organization settings:** **Integrations**, **Scans** (self-hosted only), **Audit logs**, **Slack Integration** (Vidoc Cloud only), **Members**, **Billing** (Vidoc Cloud only).
* **Change organization** (Vidoc Cloud only) and **Sign out**.

For each settings page, refer to [Settings](/web-app/settings).

## Roles

Each user has one role in the organization: **Admin**, **Security Engineer**, **Developer**, or **Read Only**.

| Permission                                   | Admin | Security Engineer | Developer | Read Only |
| -------------------------------------------- | :---: | :---------------: | :-------: | :-------: |
| View findings, pull requests, insights       |  Yes  |        Yes        |    Yes    |    Yes    |
| Export CSV and PDF reports                   |  Yes  |        Yes        |    Yes    |    Yes    |
| View Memory                                  |  Yes  |        Yes        |    Yes    |    Yes    |
| Change finding status                        |  Yes  |        Yes        |    Yes    |     No    |
| Change finding severity                      |  Yes  |        Yes        |     No    |     No    |
| Run scans, rerun PR scans                    |  Yes  |        Yes        |    Yes    |     No    |
| Add repositories, change repository settings |  Yes  |        Yes        |    Yes    |     No    |
| Delete repositories                          |  Yes  |        Yes        |     No    |     No    |
| Edit, supersede, and reactivate Memory       |  Yes  |        Yes        |     No    |     No    |
| Use AI Chat                                  |  Yes  |        Yes        |    Yes    |     No    |
| Create API keys                              |  Yes  |        Yes        |    Yes    |     No    |
| Delete API keys                              |  Yes  |        Yes        |     No    |     No    |
| Create projects                              |  Yes  |        Yes        |     No    |     No    |
| Delete projects                              |  Yes  |         No        |     No    |     No    |
| Connect source code platforms (Integrations) |  Yes  |         No        |     No    |     No    |
| Members, roles, and project access           |  Yes  |         No        |     No    |     No    |
| Audit logs                                   |  Yes  |         No        |     No    |     No    |
| Scans panel (self-hosted)                    |  Yes  |         No        |     No    |     No    |
| Billing and Slack (Vidoc Cloud)              |  Yes  |         No        |     No    |     No    |

An admin sees all projects. Other roles see only the projects that an admin gives them access to. To change roles and project access, refer to [Members](/web-app/settings#members).

<Note>
  This table describes web app permissions. PR and Slack interactions have separate access rules, including project-wide code access and finding changes through the bot. Before enabling them, read [PR permissions](/pull-requests/commands#who-can-ask-questions-and-remember-requests), [Slack access](/web-app/slack#ask-vidoc-in-slack), and [Supported platforms](/supported-platforms#who-can-use-commands-and-questions).
</Note>