# Access Profiles
URL: https://docs.autociso.io/console/operations/access-profiles/
Description: An access profile lists the access a new hire needs, based on employee attributes such as department or job title. When you start a joiner, AutoCISO combines every matching, enabled profile into the joiner's To-Do list.

*This is the help text the console shows in the help panel on this page.*

An access profile lists [the access a new hire needs](https://docs.autociso.io/product/lifecycle/onboarding/), based on employee attributes such as department or job title. When you [start a joiner](https://docs.autociso.io/console/operations/onboarding/), AutoCISO combines every matching, enabled profile into the joiner's To-Do list.

### The list
Search by name, then see for each profile who it **Applies to**, the **Access** it requires, how many current **Employees matched** and when it was **Updated**. A warning tag **Applies to everyone** marks a base profile. **Asset removed** means a required asset no longer exists; remove it from the profile when you next edit it.

### Create or edit a profile
Click **New access profile**:
- **Name** must be unique in your organisation.
- **Applies to**: add criteria (**Department**, **Job title**, **Employment type**, **Country**, **Office**) and type one or more values for each. An employee matches when every listed attribute matches one of its values; matching ignores upper and lower case.
- Turn on **Applies to every employee** for a base profile. This replaces the criteria. A profile with no criteria and the switch off cannot be saved.
- **Required access**: [choose 1 to 50 assets](https://docs.autociso.io/console/directory/assets/).
- **Enabled**: a disabled profile is ignored when To-Do lists are generated.

While you type, a line under the criteria shows how many current employees match. It is a guide and never blocks saving.

If someone else changed the profile while you were editing, you are asked to **Reload** the latest version before saving.

### Delete a profile
Deleting is confirmed and states how many open joiner cases were generated from the profile. Existing To-Do lists keep their items; new joiners no longer get the requirement.

### Permissions
[Owners and managers](https://docs.autociso.io/getting-started/roles-and-permissions/) can create, edit and delete. Other roles can open a profile read-only. The page is part of the [Employee lifecycle feature of your plan](https://docs.autociso.io/getting-started/plans-and-features/).