# What does the 'viewer' role do?

Agilicus AnyX has a rich role-based web application firewall. Some protocols this can mean very fine control (e.g. Web). Others like VNC Desktops its more coarse: read-only versus read-write. Others like RDP are all or nothing.

THe built-in roles are:

- Owner: do anything
- Editor: read/modify existing things
- Viewer: read existing things
- Self: do anything on your own data.

When looking at a protocol like Microsoft Remote Desktop (RDP), we recommend only using Owner.