# Security

ELS Compass owns its own authorisation boundary. Login can reuse an
OpenSearch or Logserver identity source, but entering the product requires an
explicit product entitlement, and reaching a workspace requires membership in
that workspace. A generic Logserver administrator is not a Compass
administrator by default.

| Page | What it covers |
| --- | --- |
| [Authentication and RBAC](auth-rbac.md) | The auth boundary, product entitlements, user administration, workspace roles and member rules. |

```{toctree}
:maxdepth: 2
:hidden:

auth-rbac
```