Skip to main content

Roles

Internal role management view, listing custom roles with Add/Edit/Delete role, Export, Import, External permissions, and Actions controls

Trivore ID has two role classes:

  • System Roles are built in and fixed — for most, there's an Admin variant that may manage a given area and an Auditor variant that may only view it (for example, Account Admin / Account Auditor). They aren't listed or edited on this page.
  • Custom Roles are namespace-specific roles with whatever selection of permissions you choose, for when the built-in System Roles don't fit your needs. This page manages those.

Roles are best understood as named, reusable sets of permissions. Custom Roles can be exported and imported (JSON format). To see which roles (system or custom) a specific user account holds, open that account's editor from Accounts and check its Access tab.

This Main Menu item is only available to accounts with the Role Admin or Role Auditor role.

Management view​

  • Add / Edit / Delete role — create, edit, or remove a Custom Role.
  • Export / Import — exchange Custom Roles as JSON files.
  • External permissions — view and manage the external permissions granted to the selected role.
  • Actions → Create recommended roles... — creates a set of ready-made Custom Roles as a starting point.
  • Info → Changes to role — an audit log of edits made to the selected role.

Editor​

Opened via Edit role. Settings are organised across two tabs.

Permissions​

  • Core — the role's name and description.
  • Permissions granted by role — a two-column picker: filterable Available permissions (by category, permission, or code) on the left, moved into Selected permissions on the right using the arrow buttons between them.
  • Grant access to other namespaces — optionally extends the role to grant access beyond the namespace it was created in.

Groups​

Shows which Groups this role is a direct member of, letting you add or remove it from Groups directly — or use Create group "<role name>" to create a new Group for this role in one step. Since assigning roles directly to a user account is discouraged, this is the usual way a Custom Role actually reaches user accounts: assign the role to a Group, then add users to that Group.

Last updated on