Roles in Settings

Settings → Roles & Permissions (PEOPLE & ACCESS) lists every role in the workspace, its permission count, type (system vs custom), and status. Only administrators (ADMIN role or admin permission) see the full management UI; others see an access-restricted message.

Please note:

• System roles are protected — you can duplicate them but not edit or delete them.
• Inactive roles remain in the list but should not be assigned to new members.
• Permission labels in the table are resolved from /api/roles/permissions (resource.action keys from the backend catalog).
• Permissions only matter for enabled modules — review Enable and manage modules before editing roles.
• Pair role design with Start modules per role so each job lands on the right homepage.

KPI widgets

Widget	Shows
Total Roles	All roles in tenant
Active Roles	Roles with isActive true
System Roles	Built-in protected roles
Custom Roles	Tenant-created roles

Role table tabs

Filter with All, Active, Inactive, System, or Custom. Search matches display name, internal name, or description.

Column	Content
Role	Icon badge, display name, internal name
Description	Short summary or em dash
Permissions	Count plus preview of first two permission labels
Type	System (lock icon) or Custom
Status	Active (green) or Inactive
Created	Formatted creation date
Actions	Duplicate; Edit/Delete for custom roles only

Common actions

Action	Availability	Result
Create Role	Admins	Opens RoleCreator dialog
Edit Role	Custom roles only	Opens EditRoleDialog
Duplicate Role	All roles	Clones permissions to a new custom role
Delete Role	Custom roles only	Permanent removal after confirm
Export	Admins	JSON download of all roles
Import	Admins	JSON upload; creates or updates custom roles

Import notes: existing roles with the same name are updated; system roles cannot be modified by import.

Assign roles to people

Roles take effect when assigned on Manage members. For conceptual RBAC (modules vs permissions, reviews), read Roles, permissions, and RBAC.

flowchart TB
  Catalog[Permission catalog API] --> Creator[Create or Edit Role]
  Creator --> Custom[Custom role with permissions]
  System[System roles] --> Duplicate[Duplicate to custom]
  Duplicate --> Custom
  Custom --> Assign[Assign on Members tab]
  System --> Assign
  Assign --> Effective[User effective access]
  Effective --> Modules[Enabled modules plus permissions]

Permission format

Permissions use resource.action keys (for example settings.view, users.read, deals.read_team). The role editor groups them by category from the backend permissions.json catalog.

Related articles

• Manage members — assign roles to users
• Manage teams — team structure alongside RBAC
• Settings drawer overview — drawer navigation
• Workspace security checklist — audit access after role changes
• Add users and invite teammates — invite with the smallest viable role