How roles and permissions work

Open Settings, then Roles and Permissions. The route is /app/settings/roles-management/roles. A role is a named set of permissions. Users receive roles. They do not receive a private list of permissions.

How access is decided

A module also checks its own licence. A role can allow Service Management, and the business can still be without the service desk licence. Both have to be true before the module opens.

  • The role. Permissions are grouped by module. Turning on create, edit, or delete also turns on the matching view permission, and that view stays on.
  • The person. Assign the role in user management. A business owner is not the same thing as a role: ownership is on the business, and it is what opens settings such as billing.
  • More than one role. When a person has more than one assigned role, the menu includes a role switcher. The module they are in uses the role they have selected.
  • The Employee role. Employee is a system role. It can be used, and it is not one of the roles you can delete.

When you need to change it

Creating and editing a role covers the role record. Assigning the role to a person is done in user management.