On this page

Assign role

You can assign a global or a custom role to a user, and create a new custom role and assign it to a user simultaneously. You cannot assign resources to a user who does not have a role. This section shows you how to:

  • Assign a new role to a user/group.
  • Assign a role to a new or existing user/group.

Tip

You can use the Role Assignments section in either the Resource application or User application to assign a role to a user/group.


To  assign role to a user/group 

  1. In the Roles application click role that you want to assign. The Role pane opens.
  2. In the Role Assignments card, click Change button.

  3. Select to Add user/group and in the Add users/groups search bar enter name, from appeared list select user/group.

  4. The selected user/group will be added to the Role assignments card. 

  5. Click the Save button, to save the changes. 

Note

You do not need to assign a resource to a global role because its permissions extend across all resources (see Scopes of roles).

Tips

  • Once you have created a new user and selected a role for the user, before clicking Create button to save the changes, you may click Add button in the Role Assignments section to assign resources to a user role.
  • You can only assign a resource to a resource-specific role. The scope of the role is Custom by default.
  • For more information about assigning resources to a role, see section Assigning resources.


Add or remove permissions

You can add or remove permissions from a role that you have created (custom role) on the Role pane. A role needs to have at least one permission.

To add or remove permissions from a user role

  1. On the Roles application do one of the following: 
    • Click the role to open Role pane, in the Permissions card click Change button.
    • Click  and select to Change permissions.
  2. Select the checkbox of a permission you want to add or clear it, to remove the permission from the role. 
  3. Click the Save button, to save the changes. 

Remove user/group from role

You can remove a user/group from a role In the Roles application. This action also can be done in the Users application. When you remove a user/group from a role, you take away the permissions associated with the role, which will cause any resources assigned to the role be removed as well. When you remove a user group from a role on the Users application, you cancel the role assigned to all users in the group.


To remove a user/group from a role

  1. On the Roles application, do one of the following: 
    • Click a role, the Role pane will open, there in Role assignments card click Change button.
    • Click  and select to Change role assignments.
  2. The Change role assignments pane will open. Click Remove button to remove the user/group from the role. The selected user will be removed from the list.
  3. Click the Save button, to save the changes.