> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# SQL Workspaces Access Control

> Understand the cloud resource and SQL Workspace engine permission layers for SQL Workspaces.

SQL Workspaces use separate permission layers for cloud resources and SQL Workspace engine operations.

| Layer | Controls |
| - | - |
| **Cloud resource access** | Who can view, create, manage, and delete SQL Workspace and SQL Catalog resources in StreamNative Cloud. |
| **SQL Workspace engine access** | What a SQL identity can query, create, change, or administer inside the engine. |

Permission in one layer does not automatically grant the same level of permission in the other. For example, a user who can manage a SQL Workspace in the Cloud Console is not necessarily an administrator inside its SQL Workspace engine.

## Private Preview administrator access

During Private Preview, Organization Admin users can administer the SQL Workspace engine. Other cloud roles do not automatically grant engine access.

The same engine permissions apply whether a user submits SQL through SQL Studio or a native PostgreSQL client.

<CardGroup cols={2}>
  <Card title="Cloud resource access" icon="cloud" href="/sql/access-control/cloud-resource-access">
    Understand access to SQL Workspace and SQL Catalog resources.
  </Card>

  <Card title="SQL Workspace engine access" icon="database" href="/sql/access-control/sql-engine-access">
    Understand SQL identities and engine administrator access.
  </Card>
</CardGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.