Custom roles and permissions
Create roles, set permission scopes, assign staff, and avoid common access pitfalls.
Written By Manning Blackall
Last updated 4 days ago
Custom roles
Custom roles let you control exactly what each staff member can see and do in the admin portal — beyond a single “admin” blanket.
Path: Settings → People & access (Roles).
Creating and editing roles
On the Roles page you can create, edit, duplicate, and delete custom roles. Each role is a named set of permissions. Duplicate an existing role when you want a variant (for example “Admin — no finance”) without rebuilding ticks from scratch.
Assign a role to each staff member (and to invitations as you add people). A person only receives what their role grants.
What permissions do
Pages, buttons, and menus the role lacks are hidden.
Opening a restricted URL directly shows a clear message naming the permission to ask for — useful when someone bookmarks a page they no longer can use.
Treat permissions as least-privilege: finance, enrolments, settings, and developer tools are the high-impact areas to separate.
Assigning staff
Invite or manage people under People & access. After someone accepts, set or change their role there. Changing a role takes effect on their next navigation; they do not keep hidden UI from a previous role.