---
title: "Configuring etcd RBAC"
description: "Reference content for protecting the etcdv3 datastore used by Calico Open Source through role-based access control and TLS authentication."
product: "Calico Open Source"
version: "3.32 (latest)"
section: "Reference"
canonical_url: "https://docs.tigera.io/calico/latest/reference/etcd-rbac/"
---

# Configuring etcd RBAC

## [📄️Setting up etcd certificates for RBAC](https://docs.tigera.io/calico/latest/reference/etcd-rbac/overview.md)

[Reference overview of role-based access control for the etcdv3 datastore used by Calico Open Source covering users, roles, and permission scopes.](https://docs.tigera.io/calico/latest/reference/etcd-rbac/overview.md)

## [📄️Generating certificates](https://docs.tigera.io/calico/latest/reference/etcd-rbac/certificate-generation.md)

[Reference for generating Certificate Authority and client certificates that authenticate Calico Open Source components against the etcdv3 datastore.](https://docs.tigera.io/calico/latest/reference/etcd-rbac/certificate-generation.md)

## [📄️Creating users and roles](https://docs.tigera.io/calico/latest/reference/etcd-rbac/users-and-roles.md)

[Reference for defining etcdv3 users and roles that grant scoped access to Calico Open Source components.](https://docs.tigera.io/calico/latest/reference/etcd-rbac/users-and-roles.md)

## [📄️Segmenting etcd on Kubernetes (basic)](https://docs.tigera.io/calico/latest/reference/etcd-rbac/kubernetes.md)

[Reference for restricting user access to Kubernetes and Calico Open Source resources using role-based access control.](https://docs.tigera.io/calico/latest/reference/etcd-rbac/kubernetes.md)

## [📄️Segmenting etcd on Kubernetes (advanced)](https://docs.tigera.io/calico/latest/reference/etcd-rbac/kubernetes-advanced.md)

[Advanced reference for restricting user access to Calico Open Source components and calicoctl through Kubernetes role-based access control.](https://docs.tigera.io/calico/latest/reference/etcd-rbac/kubernetes-advanced.md)

## [📄️Calico key and path prefixes](https://docs.tigera.io/calico/latest/reference/etcd-rbac/calico-etcdv3-paths.md)

[Reference listing the etcdv3 key prefixes used by each Calico Open Source component for role-based access control configuration.](https://docs.tigera.io/calico/latest/reference/etcd-rbac/calico-etcdv3-paths.md)