# Create a Docker, Swarm or Podman RBAC policy

Define a policy based on access permissions and role-based access control for Docker, Swarm or Podman environments.

To create a RBAC policy, in the menu, under **Environment-related**, select **Policies** then select **Create policy**. From the policy type list, navigate to the **Docker** > **RBAC** section, select **Custom** then select **Continue** to begin configuring the policy.

{% hint style="info" %}
Currently, only custom RBAC policies can be created. Future improvements to the policies feature will introduce policy templates.
{% endhint %}

| Field/Option       | Overview                                                                                                                                                                                                               |
| ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Name               | Define a name for this policy.                                                                                                                                                                                         |
| Environment groups | <p>Select one or more environment <a href="../../groups">groups</a> from the dropdown menu.<br>If the selected group is already included in an existing policy, a warning icon will appear next to the group name.</p> |
| Users/teams        | Select one or more [users](https://docs.portainer.io/admin/user/users) or [teams](https://docs.portainer.io/admin/user/teams) from the dropdown menu.                                                                  |
| Role               | Select the role you want to assign to the users or teams.                                                                                                                                                              |

<figure><img src="https://content.gitbook.com/content/xdTQRpMuktD2l0URtOJO/blobs/X3oaTkX80lklmv33QpUq/2.37-RBAC-policy.png" alt=""><figcaption></figcaption></figure>

Click **Add Access** to add the user/team to the policy, multiple users or teams can be added. Each access added will show in the **Access list**. When you have finished adding access, click **Create policy**. A confirmation screen displays the changes being made and any existing policy that will be replaced. Click **Confirm** to acknowledge the changes and create the policy.