Manage Roles and Page Access

What the matrix controls

Roles & access shows a Pages × Roles matrix. Each role column shows its name and member count; each row represents a main section or a page inside it. A checked box allows members with that role to open the page.

Changes save immediately and apply when a member with the role next loads the affected page. For a nested page, tick its parent section first. If the parent is unavailable, the child checkbox remains blocked because the page would have no usable navigation entry.

This matrix controls page entry. It does not automatically grant access to every Application, document, workflow record, or other resource inside that page; use the relevant product-area permission screen for those narrower grants.

Create a role

1. Select New role.
2. Enter a clear name and select Create. Enter also submits; Escape cancels.
3. Tick the parent sections and individual pages the role needs.
4. Return to User management → Members and assign the role.

Rename or delete a role

• Select Rename in a custom role header, change the name, then save it.
• The member count identifies roles still assigned to people.
• A role can be deleted only when its member count is zero.
• The administrator/system role is locked and cannot be renamed or deleted.
• Deleting an unused custom role is permanent and asks for confirmation.

Reassign every member before deleting a role. The delete control explains whether the system role or a non-zero member count is preventing the action.

Apply least access

• Build roles around stable job responsibilities rather than individual people.
• Tick only the pages needed for that responsibility.
• Review the parent section and all children after adding a new product area.
• Test the result with a non-admin member who holds the role.
• Use Applications Access Control for workspace, application, and page resources inside Applications.