All of Liferay's portlets support Liferay's robust, fine-grained permissions system. If your needs are more basic, the portlets also support the standard JSR-286 permissions which define whether or not a user can see a portlet. To configure these permissions, go to the Configuration menu, and you will see a tab called Permissions. This will show you a table of Roles defined in the portal. Select which roles are allowed to see the portlet and which roles are allowed to configure the portlet, and then click Submit. All Java standard portlets support these permissions.