> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Managing Lumos Roles Through the AppStore

Lumos allows you to make internal roles, such as **Auditor** or **Read Only Admin**, requestable via the AppStore. You can configure these roles with time-based or unlimited access using standard provisioning workflows.

## Setup Instructions

1. **Open the Admin Panel** and navigate to the **AppStore**.
2. Search for the **Lumos** application.
3. In the search results, find the row where **Source = Lumos** and click **Settings**.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/identities/lumos_roles/how-to-manage-lumos-roles-through-the-appstore/155a1efb1ae1-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1753825500551-Screensh.png" alt="Screenshot 2025-07-29 at 4.44.54 PM.png" />
</Frame>

4. Select the **Permissions** tab.
5. Verify that the necessary permissions (e.g. `Auditor`, `Read Only Admin`) are listed.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/identities/lumos_roles/how-to-manage-lumos-roles-through-the-appstore/54e032b72ebd-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1753825679461-Screensh.png" alt="Screenshot 2025-07-29 at 4.46.04 PM.png" />
</Frame>

If the Lumos Roles are not displaying under the AppStore Permissions, you likely need to connect the [updated version of the Lumos App](https://app.lumosidentity.com/integrations?tab=can_integrate) found in your Integrations tab.

5. For each permission you want to make requestable:

   * Click into the permission.
   * Enable **Show in AppStore**.

   Note: By default, [Synced Permissions](/kb/appstore/configuring-your-appstore/automatically-syncing-appstore-permissions) are hidden from end users.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/identities/lumos_roles/how-to-manage-lumos-roles-through-the-appstore/1fc7a0de828a-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1753825927532-Screensh.png" alt="Screenshot 2025-07-29 at 4.51.29 PM.png" />
</Frame>

In the **Provisioning** and **Deprovisioning** sections, ensure the correct workflow steps are configured:

* **Assign Role** in Provisioning
* **Unassign Role** in Deprovisioning

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/identities/lumos_roles/how-to-manage-lumos-roles-through-the-appstore/96b81185c9d1-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1753825948685-Screensh.png" alt="Screenshot 2025-07-29 at 4.52.19 PM.png" />
</Frame>

## End User Experience

Once configured, employees will be able to request access to these roles directly from the AppStore, following the access policies you’ve defined.

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/identities/lumos_roles/how-to-manage-lumos-roles-through-the-appstore/7cfee5a639e9-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1753826010855-Screensh.png" alt="Screenshot 2025-07-29 at 4.53.17 PM.png" />
</Frame>
