# DHCP Role Based Access Control (RBAC)

DHCP subnets, supernets, and hosts in your organizations' servers can now be assigned to individuals in the network based on their roles. Admins can grant access to selected users for specific subnets, supernets, and hosts in the network.

To grant access to users in the network:

1. Click through **Settings > Users > Add User.**

![DHCP RBAC Step 1](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-1.png)

2. Provide the details in the following fields:

![DHCP RBAC User Details](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-new.png)

- **NAME:** Provide the name of the individual in the network.
- **USERNAME:** Provide their username assigned in the network.
- **EMAIL:** Provide the network admin's email ID.
- **PASSWORD:** Provide the password for configuration.
- **TOTP:** Enable TOTP for Two step verification before granting access to subnets, supernets, or hosts.
- **ROLE:** Select the role you want to assign to the individual. There are 4 different role options, and only **Operator** and **Guest** roles can be granted access to subnets, supernets, or hosts.
- **CLUSTERS:** Select the cluster from which monitors and domains need access granted for the individuals.
- **TYPE:** Select from which network service's resources need access granted.

![IPAM Permissions](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-ipam-perms.png)

The IPAM Permissions field allows network administrators to selectively grant individuals access to view the IPAM Tower View data of the cluster.

- The **View** type allows users to view the data.
- The **Restrict** type completely prevents users from accessing the IPAM data.

![Supernet Selection](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-3.png)

3. Select the supernet you want to grant access for the users in the **Select Supernets** field.

4. When the supernet is selected, two new options get displayed for the **SUPERNET PERMISSION:**

   - **MANAGE** – This option allows the user to manage the existing subnets in the selected supernet.
   - **MANAGE AND CONFIGURE** – This option allows the user to both manage the subnets and create new subnets within the selected supernet.

5. Below that, you can select subnets for access granting:
   - Select all the subnets in the network by clicking on **ALL**.
   - Select specific subnets by clicking on **SELECT SUBNETS**.

![Subnet Selection](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-4.png)

6. Finally, you can select the hosts for access granting:
   - Select **ALL** for managing all the hosts in the cluster.
   - Select **ASSIGNED SUBNETS** or **ASSIGNED SUPERNETS** for managing hosts under the assigned subnets or supernets accessible by the user.

![Host Selection](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-5.png)

![Save Configuration](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-save.png)

7. Click on **+Add Cluster Permissions** to save the configurations, and click on **Save** to add the user with the access permissions in the network.