How do I create a role with only the permissions I choose?

You will have made a role that gives exactly the abilities you tick.

Before you start

You need permission to manage roles. You can tick only permissions you hold yourself; the rest of the boxes are disabled.

Steps

1. Open User Management and choose the Roles tab.
2. Press Add.
3. Enter a name, 2 to 200 characters and different from every other role. The code is generated.
4. In the permission matrix, tick what the role may do. Permissions are grouped by plugin and then by resource, with read, write and delete columns and extra action columns.
5. Press Save. At least one permission must be ticked.

What you will see

The role appears in the list with its permission count, and can be chosen when you add or edit a user.

If something goes wrong

• A disabled box with a tooltip is a permission that comes from elsewhere, belongs to platform operation, or that you do not hold.
• To change a role later, press Edit; the change applies to everyone who has it, within seconds.
• A role cannot be deleted while anyone holds it; move them first.
• Deactivating a role moves everyone who has it to the default role, which can only read the knowledge base. Do not do this to Admin.