# Access Controls Term Finance Protocol contracts inherit from OpenZeppelin's [AccessControlUpgradeable.sol ](https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/blob/master/contracts/access/AccessControlUpgradeable.sol)contract, an upgradeable variant of [AccessControl.sol](https://docs.openzeppelin.com/contracts/3.x/access-control). This allows Protocol contracts to define multiple roles, each with access to perform different sets of actions. The table below documents all roles, their multi-signature wallets and modules, and accessible methods assigned within the Protocol. {% tabs %} {% tab title="Ethereum" %}

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/11) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/10)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/6)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

{% endtab %} {% tab title="Avalanche" %}

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/9) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/9)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/9)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

{% endtab %} {% tab title="Base" %}

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/11) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/10)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/6)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

{% endtab %} {% tab title="BNB" %}

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/11) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/10)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/6)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

{% endtab %} {% tab title="Plasma" %}

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/11) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/10)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/6)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

{% endtab %} {% endtabs %} {% hint style="info" %} Signers of the DevOps-Proposer Gnosis Safes and Admin Gnosis Safes are required to abide by the Signer Compliance Policy viewable [here](https://files.gitbook.com/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fg2unsUVhFxcxuJwNIofz%2Fuploads%2FH076wEUfpUyXvSN97Hms%2FTerm%20Labs%20-%20Signer%20Compliance%20Policy%20231113.pdf?alt=media\&token=f4e793da-5314-4c97-8c9e-a629e58630da). {% endhint %} --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://developers.term.finance/access-controls.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.