# Security model **URL:** \ **Category:** Feedback\ **Tags:** feature-request\ **Created:** [January 10, 2022, 4:01pm UTC](https://forum.api.combocurve.com/t/security-model/78 "2022-01-10T16:01:57Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![lucas.fontenelle](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.api.combocurve.com/lucas.fontenelle/32/55_2.png) [@lucas.fontenelle](https://forum.api.combocurve.com/u/lucas.fontenelle)\ **Post date:** [January 10, 2022, 4:01pm UTC](https://forum.api.combocurve.com/t/security-model/78/1 "2022-01-10T16:01:57Z")
**Pondering the Security Model** Not sure where this is on the priority list, but adding here so others can add input. As we add more users and can automate production forecasting and economic modeling, People are asking about ways to make their results official. We want to use this for official purposes, we need to raise some fences so that people don’t step on each others toes and that we keep the auditors happy. In order to do thins we need to compose some kind of **Hierarchy**. _The Project Tree_. Right now this is not not a tree, its the wild west. I would love to get input from all ComboCurve users and administrators about how they manage the tool, and from the devs at Inside Petroleum on what are the plans. Ill throw out a few of my ideas here too. **Security Access** The ability to access certain Areas of the hierarchy As we add users we need to be able to control where they go. What are the plans to control this? Can we use Azure AD to automate/synchronize user roles and security access? Is there a configuration file ? **Role Access** The ability to use certain functions at different levels in the hierarchy. We need to dictate what users do on different sides of the application. With more users how do we control and manage how users can perform certain functions in specified areas. Can we use tags to manage this? ## Locking things down What are the plans to lock down certain forecasts in certain projects Apply certain security roles to Forecasts within Projects Apply security roles to tags Lock down tags ## Automating roles and security What are the plans for an Administration Console What goes into the console Other config stuff. Waiting for input. -Lucas ---
**Author:** ![maikel.ruiz](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.api.combocurve.com/maikel.ruiz/32/101_2.png) [@maikel.ruiz](https://forum.api.combocurve.com/u/maikel.ruiz)\ **Post date:** [January 10, 2022, 8:35pm UTC](https://forum.api.combocurve.com/t/security-model/78/2 "2022-01-10T20:35:24Z")
Hey @lucas.fontenelle. Welcome to the forum. Thanks for the feedback and the good points you are bringing up for discussion. I’m pinging the team internally about this.