Roles

Before you start

You need roles.read to view and roles.manage to change.

Steps

1. Open Setup, then Roles.
2. Click to create a role, or open one to edit it.
3. Enter Role name: 2 to 48 characters, lowercase letters, digits, and hyphens, starting with a letter, with no trailing hyphen.
4. Enter a Description (up to 200 characters).
5. Pick Inherits from if the role builds on another. You see only parents you may delegate.
6. Tick Direct permissions. They are grouped by app and area.
7. Check Effective permissions, then click Create role or Save changes.

Rules and limits

• Permissions you do not hold are greyed.
• A key from an app that is not installed shows as Unavailable. The system keeps it.
• Both save buttons are disabled when the role has no permissions and no parent.
• The owner role is Protected. It holds every permission and cannot be edited or deleted.
• Deleting a role removes access from its accounts and child roles stop inheriting. You cannot undo it.
• Each app seeds starter roles once, on first start. Logistics seeds viewer, storekeeper, supervisor, logistics-admin, planner, and reporter. Other apps seed their own.

If something goes wrong