# Access Controls Term Finance Protocol contracts inherit from OpenZeppelin's [AccessControlUpgradeable.sol ](https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/blob/master/contracts/access/AccessControlUpgradeable.sol)contract, an upgradeable variant of [AccessControl.sol](https://docs.openzeppelin.com/contracts/3.x/access-control). This allows Protocol contracts to define multiple roles, each with access to perform different sets of actions. The table below documents all roles, their multi-signature wallets and modules, and accessible methods assigned within the Protocol. {% tabs %} {% tab title="Ethereum" %}

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/11) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/10)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/6)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

{% endtab %} {% tab title="Avalanche" %}

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/9) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/9)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/9)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

{% endtab %} {% tab title="Base" %}

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/11) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/10)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/6)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

{% endtab %} {% tab title="BNB" %}

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/11) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/10)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/6)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

{% endtab %} {% tab title="Plasma" %}

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/11) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/10)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/6)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

{% endtab %} {% endtabs %} {% hint style="info" %} Signers of the DevOps-Proposer Gnosis Safes and Admin Gnosis Safes are required to abide by the Signer Compliance Policy viewable [here](https://files.gitbook.com/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fg2unsUVhFxcxuJwNIofz%2Fuploads%2FH076wEUfpUyXvSN97Hms%2FTerm%20Labs%20-%20Signer%20Compliance%20Policy%20231113.pdf?alt=media\&token=f4e793da-5314-4c97-8c9e-a629e58630da). {% endhint %}