A role groups permissions around a responsibility. A permission is part of the access a user may receive through a role or directly.
ROLES & PERMISSIONS
Give your team access that fits the work.
Define organization roles, assign them to the right people, and review the permissions that shape their access.
THE ACCESS MODEL
A role groups permissions. Assignment connects it to a person.
Keep the three ideas distinct so your team can discuss responsibility and access with more clarity.
- Role
- A group of permissions connected to a work responsibility, within the roles your organization can use.
- Role assignment
- The connection between a role and a user who belongs to the organization. The person’s account does not become a new account type.
- Effective access
- The permissions a user receives. They can come through roles or be granted directly to that user.
Removing a role calls for a review of remaining access, because a permission can come from another role or a direct grant.
KEEP RESPONSIBILITY CLEAR
Three practical ways to organize team access.
Work from the organization context when defining responsibility, connecting people to it, and reviewing their access.
Define roles
Create organization roles and configure permissions for roles that can be changed.
Assign responsibilities
Assign roles to users, or remove them, within the organization context.
Review access
Understand the permissions a person receives instead of relying on a role name alone.
ROLES & PERMISSIONS FAQ
Roles and permissions questions
Short answers about roles, assignments, and access in your organization.
No. A role is connected to a user within the organization context; it does not create a separate account type.
You can create organization roles and work with permissions for roles that can be changed. This does not mean every predefined role is editable.
Not necessarily. Other roles or a direct grant may still contribute to a user’s effective access.
That does not follow. Roles and access are evaluated in the organization context where the person is working.
RESPONSIBILITY, MADE CLEAR
Give every person access that fits their responsibility.
Start with roles and permissions that keep team access understandable.
Start for free