The data in Rock is some of the most sensitive your organization holds (giving records, family details, background checks), so deciding who can see and do what is one of the most important jobs you have. Rock's security model is built to make that manageable, not overwhelming. A few ideas do most of the work: Security roles - Groups of people who share the same access, so you grant permissions once to a role instead of person by person. Manage them at Admin Tools > Settings > Security Roles.Secured items - Almost everything in Rock, a page, a block, a data view, a financial account, can be secured, using the shield or lock control on that item.Actions - Each item defines what a role can do to it, such as View, Edit or Administrate. The next articles walk through setting these up. Start with Security Roles and Secure a Page or Block. Keep Rock Up to Date Permissions protect your data from the inside. Updates protect it from the outside. When a more secure version of Rock is available, people in the RSR - Rock Administration role see a notice on the internal homepage until you update. See Update Rock to learn how to install updates. Report a Security Issue If you find what looks like a security flaw in Rock, report it at security.rockrms.com instead of opening a GitHub issue. Reports there stay private, so our team can fix the problem before the details are public.