# Permission resources

The underlying structure behind permissions is that users, groups, or systems have access to a resource.

- A resource is a feature that exists in either PeopleStage, FastStats, or Orbit. Resources include Areas, Campaigns, Files, Templates, Voucher Seeds, Communication Channels, Roles, etc.
- Permissions grant or deny access to different types of resources. There are different types of permissions.

Resources are further broken down into two broad categories, hierarchical and tagged:

- A hierarchical resource is the child or parent of another resource of the same type
- File directories, campaigns, and areas are examples of hierarchical resources
- A tagged resource doesn't have a parent or children. Templates, voucher seed sets, Velocity restrictions, and export channels are examples of tagged resources.
- Tags group resources together

## Permission resource types

Once you create users, groups, and resources, there are two workflows for assigning permissions:

For Tagged Resources:

1. **Create** a tag (if it doesn't already exist).
2. **Link** a tag to a resource.
3. **Apply** permissions to the linked tag for that resource type in the Permissions UI.

For Hierarchical Resources, apply permissions to the resource in the Permissions UI.