Skip to content

Custom Roles

Custom roles extend the built-in User, Approver, and Admin roles with fine-grained permissions scoped to specific resources and actions. Roles can be assigned directly to users or to groups.

Navigate to Settings > People & Access and click the Roles tab. Each role shows its description, the number of direct users, and the number of groups it is assigned to.

Roles tab showing role list with search, sort, and view toggle

Navigate to the Roles tab.

Click Create Role to open the creation dialog. Enter a name, slug, and description, then select the permission scopes this role should grant. Scopes follow a resource:action pattern (e.g., requests:approve, grants:revoke).

Create role dialog with name, slug, description, and permission scope picker

Navigate to the Roles tab.

Click a role to view its detail modal. The modal shows the full list of granted permissions and summary stats for users and groups that hold this role.

Role detail modal showing permissions, user count, and group count

Navigate to the Roles tab.

Click the edit icon on a role row to modify its name, description, or permission scopes. To delete a role, click the delete icon and confirm in the dialog.

Edit role dialog with name, description, and permission scope picker

Related guides: