Incredibly rich and customizable role-based access control is available to allow granular administration of Compass. Default or custom roles can be assigned to users and groups or integrated with Active Directory (AD) or Lightweight Directory Access Protocol (LDAP). Permission levels may be customized by the type of user (admin vs. end-user) and by source of protected data. Access can be further customized through projects, locations, and over 50 selectable fine grain access elements.