Home
Back to docs

Users & Roles

Access comes from a role, and per-user permissions are added on top of it; nobody can grant what they do not hold themselves.

The people who sign in to the admin panel, and what each of them can do.

Access is the sum of two things

A user's access comes from their role. Any permissions set on the user themselves are added to it. They never subtract: to take an ability away, change the role or edit the role itself.

Permissions are named after their module

A permission looks like invoices.create or users-roles.users.manage: the module first, then what it governs. invoices.* grants everything in that module, and * grants everything on the platform. Administrators do not type these; they tick them in the permission matrix.

The four built-in roles

  • Admin has broad access to every module an install sells, plus managing users, roles, departments, the plan page and site settings. It is not "everything": it has no access to the audit log or to platform-operator controls.
  • Editor works on content: pages, media and forms, reading the knowledge base, and reading every support ticket.
  • Default role holds only the right to read the knowledge base. Nobody is given it automatically; it is where a user lands when their own role is deactivated.
  • Superadmin is the platform operator and holds every permission.

Admin and Editor can be edited like any role you create. Default role and Superadmin cannot be changed or deleted by a tenant administrator, and are hidden from their lists.

Nobody can reach above themselves

  • You can grant or assign only permissions you hold yourself, and a role is treated as the permissions it carries.
  • Permissions that belong to platform operation (hosted plans, upgrades, deployment, data-protection tools, audit log, theme management) can be granted only by a superadmin.
  • A user who holds any of those is a protected account: a tenant administrator cannot view, edit, reset the password of, deactivate or delete them. The attempt is refused, and such users are hidden from the users list.

Passwords and sessions

A password needs at least 8 characters with an uppercase letter, a lowercase letter, a digit and a symbol. A sign-in lasts 8 hours, and at most 5 devices can be signed in at once; the oldest is signed out when a sixth signs in. Setting or resetting a password, deactivating or deleting a user signs them out everywhere.

Changes apply within seconds

Changing a user's role or permissions takes effect within a few seconds; nobody has to sign in again. It also does not sign them out, so their access updates while they work.

How do I…

How do I add a user?Create a staff account with a password, a department and a role.How do I change someone's role?Give a person a different role, which changes what they can do within seconds.How do I reset someone's password?Set a new password for a colleague, which signs them out of every device.How do I remove someone's access when they leave?Deactivate the account, which is reversible and keeps history, rather than deleting it.How do I create a role with only the permissions I choose?Make a new role in the permission matrix for a kind of colleague, such as a bookkeeper or a support agent.How do I create a role for translators?Build a role that can translate content in the site's languages without being able to change the content itself.How do I give a user permissions their role does not include?Add a permission to a single person without changing their role.How do I add a department?Create a department to group people, and know what happens when you disable one.How do I change my password and sign out my other devices?Change your own password, and end sessions you left open elsewhere.How do I change my name, phone or profile photo?Edit your own details and photo from My Profile.How do I see my plan and upgrade it?Check your plan, its state and renewal date, then go to the customer portal to change it.