# User Access & Permissions

Define who can access what once they’re signed in. Use this section to grant tenant access (full or readonly), enable VPN or database connectivity, and set up user notifications.

* [Tenant Access for Users](https://docs.duplocloud.com/docs/automation-platform/access-control/user-access-and-permissions/tenant-access) — Assign access to one or more tenants.
  * [Give a User Tenant Access](https://docs.duplocloud.com/docs/automation-platform/access-control/user-access-and-permissions/tenant-access/give-a-user-tenant-access) — Add a user to specific tenants.
  * [Readonly Access to a Tenant](https://docs.duplocloud.com/docs/automation-platform/access-control/user-access-and-permissions/tenant-access/read-only-access-to-a-tenant) — Limit a user’s access to view‑only.
  * [Add Tenant Access over a VPN](https://docs.duplocloud.com/docs/automation-platform/security-and-compliance/access-control-2/add-tenant-access-over-a-vpn) — Grant tenant access for VPN users and add required security rules.
  * [Cross‑Tenant Access](https://docs.duplocloud.com/docs/automation-platform/security-and-compliance/access-control-2/cross-tenant-access) — Allow access across tenants; required Security Group rules and URL format.
* [Permission Sets](https://docs.duplocloud.com/docs/automation-platform/security-and-compliance/access-control-2/permission-sets) — Control what users can access and what actions they can perform after signing in.
* [VPN Access for User](https://docs.duplocloud.com/docs/automation-platform/access-control/user-access-and-permissions/add-and-delete-vpn-access-for-users) — Configure VPN connectivity for users.
* [Database Access for Users](https://docs.duplocloud.com/docs/automation-platform/security-and-compliance/access-control-2/database-access-for-users) — Grant user access to databases (e.g., RDS/SQL).