Roles and permissions

Content:

1. Object roles
2. System roles
3. Relationships between users
4. Hiding interface elements

Object roles

You need to grant users permissions if you want them to do more on the platform.

Go to Configuration > Security > Roles & permissions and start with creating an object role.

Object roles are used to manage elements that can be divided into groups and folders, so users and most of the content.

To create an object role click Add in the upper right corner.

Name the role, you can also add a description.

In the second step you need to choose permissions. Here you decide what will be possible to do on the platform for users with this role. Move permissions from left to right to add them to the role.

When permissions are ready, you need to decide who will be able to use them and where.

In the Folders, groups and users sections click Add to start with choosing groups and folders on which selected users will be able to use the role.

If you choose the Organization folder it will mean that the role will apply to the whole platform.

Now you need to click Assign next to the group or folder. This way you will choose users that will be able to use this role on this group or folder. You can choose whole groups of users or individual users.

At the end click Add to save your role.

System roles

System roles also allow users to do more on the platform, but regarding other areas than object roles.

System roles allow you to manage elements of the platform that are not divided into groups and folders, which means most of the settings.

Creating a system role works almost the same as creating an object role.

In the System roles tab click Add and name and describe the role.

Below move permissions from left to right and at the end choose which users will have the role.

Click Add to finish creating the role.

Relationships between users

Object roles may also be used to define permissions that may be used in relationships. It means that you can use a role to define what will be the default supervisor permissions.

To use a role in this context, check the Can be used in relationships checkbox when creating the role.

Then choose permissions and that’s it, you don’t need to choose any groups.

Add the role and it will become available to choose when adding new accounts or editing existing ones.

Hiding interface elements

System roles can be also used to hide certain positions in the menu for specific users.

To do that, create a system role and don’t add any permissions to it, just choose users that you want to hide something from.

When the role is created, go to Configuration > User interface > Interface elements and choose your role there.

On the left side you can find every position in the menu, and on the right you can find positions hidden for the role.

Move positions to the right if you want to hide them and click Save. They will become immediately hidden.