Managing roles

Purpose

• View all defined roles
• Create new roles
• Edit role permissions
• Review role membership
• Delete unused roles

Prerequisites

• View roles: accesscontrol.roles.read
• Create/edit roles: accesscontrol.roles.create
• Full role management: accesscontrol.roles.*
• Confirm account context before making changes.

View Roles

1. Open Access Control → Roles.
2. Review the roles table.
3. Select a role to view details and assigned permissions.
4. Expected result: Roles are visible with permission summaries.

Create a New Role

1. In Roles, select Create Role.
2. Enter role name and description.
3. Assign required permissions.
4. Save the role.
5. Expected result: Role is created and available for user assignment.

Edit Role Permissions

1. Open the target role.
2. Select Edit Permissions.
3. Add or remove permission keys.
4. Save changes.
5. Expected result: Role permissions are updated and effective for assigned users.

Delete Roles

1. Select the role to delete.
2. Click Delete.
3. Confirm deletion.
4. Expected result: Role is removed and no longer available for assignment.

Best Practices

• Use job-function-based role naming.
• Keep role definitions focused and minimal.
• Avoid creating duplicate or overlapping roles.
• Review role permissions regularly.
• Document role purpose and intended use.