> ## Documentation Index
> Fetch the complete documentation index at: https://hoopdev-fix-add-missing-mechanic-for-session-download-button.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Resource Roles

> The bridge between users and resources

<img src="https://mintcdn.com/hoopdev-fix-add-missing-mechanic-for-session-download-button/JA0PdC0o4BPvOEZ9/images/concepts/connections-light.png?fit=max&auto=format&n=JA0PdC0o4BPvOEZ9&q=85&s=d663e71112cbca5bc62e01083d116b23" alt="Connections" className="block dark:hidden" width="1329" height="835" data-path="images/concepts/connections-light.png" />

<img src="https://mintcdn.com/hoopdev-fix-add-missing-mechanic-for-session-download-button/JA0PdC0o4BPvOEZ9/images/concepts/connections-dark.png?fit=max&auto=format&n=JA0PdC0o4BPvOEZ9&q=85&s=689d1946f148a2aafadb8a38b6fe3a68" alt="Connections" className="hidden dark:block" width="1329" height="835" data-path="images/concepts/connections-dark.png" />

# Resource Roles

Resource Roles are a central concept in Hoop.dev that serve as secure bridges between users and your organization's resources. They enable controlled access to internal services, databases, and other resources while maintaining security and compliance. Resource Roles are defined by the administrator and can be assigned to users and groups.

## What is a Resource Role?

A Resource Role is a configurable connection that exposes internal services from your infrastructure to authorized users in a secure and controlled manner. It acts as an intermediary layer that:

* Provides secure access to internal resources
* Enforces access control policies
* Enables monitoring and auditing of resource usage
* Supports various types of services and protocols

## Types of Resources

Hoop.dev supports several types of connections:

**Databases**

* PostgreSQL, MySQL and many other database systems

**Applications**

* TCP forwarding, custom CLI tools, and web services

**Custom Resources**

* Ability to connect to specialized resources
* Support for complex configurations
* Integration with custom tools and services

## Key Features

### Access Control

* Granular permission management
* Group-based access policies
* Review processes for sensitive resources

### Security

* Encrypted communication
* Credential management
* Audit logging
* Security policy enforcement

### Monitoring and Compliance

* Activity tracking
* Usage analytics
* Compliance reporting
* Integration with SIEM systems

## Resource Components

Resources and Resource Roles in Hoop.dev consist of several components:

<AccordionGroup>
  <Accordion title="Configuration">
    <ul>
      <li>
        Name and type
      </li>

      <li>
        Resource specifications
      </li>

      <li>
        Security settings
      </li>

      <li>
        Access control rules
      </li>
    </ul>
  </Accordion>

  <Accordion title="Agent Integration">
    <ul>
      <li>
        Connects to internal resources
      </li>

      <li>
        Manages communication
      </li>

      <li>
        Handles authentication
      </li>

      <li>
        Enforces security policies
      </li>
    </ul>
  </Accordion>

  <Accordion title="Plugins and Extensions">
    <ul>
      <li>
        Integration with external tools
      </li>

      <li>
        Custom functionality
      </li>

      <li>
        Automation capabilities
      </li>

      <li>
        Compliance features
      </li>
    </ul>
  </Accordion>
</AccordionGroup>

## Best Practices

<CardGroup cols={2}>
  <Card title="Security First" icon="shield">
    * Use strong authentication
    * Implement least privilege access
    * Enable review processes for sensitive resources
    * Regularly audit access patterns
  </Card>

  <Card title="Organization" icon="folder">
    * Use clear naming conventions
    * Group related resource roles
    * Document resource role purposes
    * Maintain access control lists
  </Card>

  <Card title="Monitoring" icon="eye">
    * Enable logging and auditing
    * Monitor usage patterns
    * Set up alerts for suspicious activity
    * Regular security reviews
  </Card>

  <Card title="Regular Updates" icon="arrows-rotate">
    * Keep software and dependencies up to date
    * Apply security patches promptly
    * Review and update configurations regularly
    * Stay informed about new features and improvements
  </Card>
</CardGroup>

## Managing Resources

Resources and Resource Roles can be managed through:

1. **Web Interface**
   * User-friendly management console
   * Real-time monitoring
   * Configuration tools
   * Access control management
2. **API**
   * Programmatic access
   * Automation capabilities
   * Integration support
   * Custom implementations
3. **CLI**
   * Command-line management
   * Scripting support
   * Automation tools
   * Quick access

## Next Steps

To get started with your Resources and Resource Roles:

1. [Set up your first resource](/clients/webapp/creating-resource-roles)
2. [Learn about access management](/clients/webapp/managing-access)
3. [Explore integration options](/integrations)
4. [Understand the architecture](/setup/architecture)