---
title: App services security model
category: docs
layout: docs
---

App services security model
===========================

This section contains information about the security model in App
services. It describes how App services performs authentication and
mediates access to resources.

As described in these pages, App services rely on OAuth 2.0 for
authentication, basing data access decisions on tokens supplied with
each API request. Appropriate credentials are necessary to generate
these tokens. Access to App services entities is further restricted by
assigned roles and permissions.

-   [Authentication and access in App
    services](/authentication-and-access-app-services-0)
    -   [Access
        types](/usergrid/content/authentication-and-access-usergrid#access_types)
    -   [Applications](/usergrid/content/authentication-and-access-usergrid#applications)
    -   [Application
        users](/usergrid/content/authentication-and-access-usergrid#application_users)
    -   [Using an access
        token](/usergrid/content/authentication-and-access-usergrid#access_token)
    -   [Safe mobile
        access](/usergrid/content/authentication-and-access-usergrid#safe_mobile)

-   [Managing access by defining permission
    rules](/managing-access-defining-permission-rules)
    -   [Roles](/usergrid/content/roles-and-permissions-usergrid#roles)
    -   [Permissions](/usergrid/content/roles-and-permissions-usergrid#permissions)

-   Nonexistent node nid: 302.
    -   [authentication](/usergrid/content/facebook-sign)