Under «Settings» → «Security» you see all the roles in your workspace and which permissions each role carries. As an administrator you have a read-only view here: you can look at the roles and their permissions. Roles are created, changed and deleted by amaise — on request through Customer Success, who approve every change first.
The roles overview
The table lists each role with:
a status — «Standard» for a role shipped by amaise, «Adjusted» for a modified standard role, «Custom» for a role that belongs to the workspace itself,
the number of permissions the role includes,
the number of users who hold the role.
Viewing a role's permissions
Using the eye icon you open a role and see its permission catalog, grouped by category. That way you can check exactly what a role is allowed to do before you assign it to someone.
Note: Because you can only view the roles, the fields are read-only. If you want to adjust a role or create a new one, contact Customer Success. Name the workspace, the role and which permissions should be added or removed. Customer Success approves the change, then amaise makes it.
You manage which role a person holds in user management (see Settings: Manage users). The fundamental roles and what they mean are also explained in the Security FAQ on roles and permissions.
Following changes to a role
Every change to a role is recorded in your workspace's audit log. Search there for id: followed by the role's key, for example id:tenant:claims-lead for a «Custom» role. You then see who created, changed or deleted the role and when, and which permissions were added or removed. For a «Custom» role you also see what its title, description and icon were before and after; a standard role's title, description and icon are amaise's, so for a standard role only the permission changes are recorded. The «Last 2 years» filter reaches back the furthest (see Audit log: Track access).
Switching role temporarily
From the avatar menu in the top right, under «Switch role», you can temporarily take on a lower role and see amaise the way that role sees it. This helps with testing and support — for example, to understand what a Basic user sees in a case. You can return to your own role at any time.
While you are switched, you see everything that role can see — switching from «Technical admin» to «Basic user», for example, includes case contents and documents. On a production workspace that is real case data, so switch with care. If a production workspace should not allow it at all, amaise can remove the role switch from «Technical admin» on request through Customer Success.