You can create, modify, or remove roles to establish your permission framework. Your users might need different levels of access or permissions based on their roles. Since a user can have more than one role, and each role comes with its own permissions, all these permissions add up.

You need the "Manage users, groups and roles" permission to manage roles.

Create a role

1. Go to Administration > User Management > Roles
2. Select Create Role 
3. Enter a descriptive name for your role to signify what it does.
4. Optionally, you can set one role within your platform to Default. The permissions of this role will apply to all platform users even if they are not assigned to the respective role. Learn more XX.
5. Select the Groups that the role should be assigned to. Any users in the group will receive the role and its permissions.
6. Optionally, select individual Users that will receive the role. This is only recommended if the permissions in the role are high-level and should only be assigned to very few people rather than larger groups. Otherwise, for easier management, we recommend using groups to manage roles.
7. Select the permissions that should be assigned to the role. Any user that receives the role will get the assigned permissions.
8. Select Save to create the role

We'll help you create a roles and permissions concept that suits your needs. We've created a few typical use cases for this to give you a little inspiration along the way. We explain our recommendations in these articles:

• Best practice: User role
• Best practice: Editor role
• Best practice: Chief editor role
• Best practice: IT admin role

Delete a role

1. Go to Administration > User Management > Roles
2. Find the role you want to delete
3. Select > Delete

If a role is deleted, any users to which it was assigned lose the permissions assigned to the role. Deleted roles cannot be restored.