---
title: Roles and permissions for the migration
slug: roles-and-permissions-for-the-migration
createdAt: 2026-11-05T18:27:16.227Z
---

# Assign authorization for CACF workloads

If workflows use the Cloud Automation Community Framework (CACF), make sure that catalog activation and user authorization follow the CACF governance model.

# CACF requirements

To control access and govern CACF based catalog items, meet the following requirements before you activate, manage or run catalog items:

- An authorized persona, such as a Delivery Program Executive (DPE), should perform catalog activation.
- Users must have the appropriate roles before they can activate or manage catalog items. 
- The DPE must approve any tenant user who requires permissions to run CACF-based catalog items. 

Catalog activation is supported by the following Bridge roles:

- Platform Administrator
- Platform Editor
- Catalog Administrator 
- Catalog Editor
- Any future roles that provide equivalent catalog permissions

Assign the appropriate role based on the user's responsibilities and level of access. 

:::hint{type="info"}
The DPE must approve any tenant user who is authorized to run CACF based catalog items. Existing content and user authorizations that were migrated from the tenant are considered approved by the DPE unless otherwise reviewed. 
:::