> For the complete documentation index, see [llms.txt](https://docs.balkan.id/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.balkan.id/rbac-analyzer/balkanid-generated-roles.md).

# BalkanID Generated Roles

The BalkanID Generated Roles table is a powerful component of the RBAC Analyzer, providing a comprehensive view of the roles identified by the BalkanID RBAC algorithm. Each role represents a distinct combination of connections and overlapping access patterns, offering valuable insights into the organization's access control landscape.

![](https://balkanid.zendesk.com/hc/article_attachments/26069549746971)

The BalkanID Generated Roles represent the baseline access privileges that new employees are granted as part of their onboarding process, ensuring they have the necessary permissions to perform their duties from day one.BalkanID classifies the generated roles into four distinct categories:

1. **Birthright**: If everyone in the company has the same set of access privileges.&#x20;
2. **Department Birthright**: If everyone in the department has the same set of access privileges.&#x20;
3. **Job Birthright**: If everyone in the department with job title has the same set of access privileges.&#x20;
4. **Functional Birthright**: If everyone in the department with job title under a manager has the same set of access privileges.&#x20;

The BalkanID Generated Roles page offers powerful filtering capabilities, enabling administrators to explore and identify users assigned to specific roles. For instance, an administrator can apply a job title filter to find all BalkanID generated roles assigned to employees with the '*CEO*' job title, providing valuable insights into the access privileges granted to executive-level personnel.

![](https://balkanid.zendesk.com/hc/article_attachments/26069532957211)

Furthermore, administrators can drill down into individual BalkanID generated roles to obtain a detailed list of identities, connections, resources and entitlements associated with that role by clicking on that particular role. This will lead to the **BalkanID Generated Role Details Page** providing a granular view that facilitates a deeper understanding of the access privileges granted by each role, i.e the list of connections and identities.

![](https://balkanid.zendesk.com/hc/article_attachments/26069532958619)

![](https://balkanid.zendesk.com/hc/article_attachments/26069549753627)

![](https://balkanid.zendesk.com/hc/article_attachments/26069549754907)

![](https://balkanid.zendesk.com/hc/article_attachments/26069549755931)

The BalkanID Generated Roles page offers export and access review capabilities. With a single click on the download button, you can export the list of generated roles, associated identities, connections, resources and entitlements into a CSV file. The download button becomes active only after selecting specific rows or applying filters, providing flexibility. Additionally, the page includes a "*Create Reviews*" button, enabling you to initiate ad-hoc access reviews for deeper analysis and validation of the generated roles.

By leveraging the BalkanID Generated Roles page and role details page organizations can gain a comprehensive understanding of their access control landscape.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.balkan.id/rbac-analyzer/balkanid-generated-roles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
