diff --git a/RBAC-Notes.md b/RBAC-Notes.md
new file mode 100644
index 0000000..4e39751
--- /dev/null
+++ b/RBAC-Notes.md
@@ -0,0 +1,5 @@
+* Entities (incident, call, talkgroup record, alert)
+  * Read, write (permissions)
+  * Owner, other users, public (roles)
+  * Role permission assignments configurable in webui
+  * ACLs per entity with inheritance from default configurable global ACL
\ No newline at end of file