diff --git a/Roles-and-Permissions.md b/Roles-and-Permissions.md
new file mode 100644
index 0000000..be7b86b
--- /dev/null
+++ b/Roles-and-Permissions.md
@@ -0,0 +1,37 @@
+Taskcafe has three levels a user can have a role at.
+
+- Organization
+- Team
+- Project
+
+### Organization role
+
+The user's organization role can either be **Member** or **Admin**. This role is set 
+when creating the user in the admin console.
+
+The admin organization role allows users to create new teams and manage users. They also have **Team** and **Project** role capabilities on ALL projects.
+
+The member organization role only has access to teams and projects based on their **team roles** and **project roles**.
+
+They can also create personal projects.
+
+### Team role
+
+If a user is added to a team, they can have either a **Member** or **Admin** role.
+
+A **Member** can view all projects within the team and has the same capabilities as a **Project Member** would.
+
+An **Admin** can also manage team members and create new projects within the team.
+
+
+
+### Project role
+
+If a user is added to a project, they can have either a **Member** or **Admin** role.
+
+A **Member** can manage tasks, task groups, labels, etc.
+
+An **Admin** can also manage project members.
+
+
+Organization > Team > Project is the precedence order when deciding the final role for an object.