How to manage global role permissions of the portal

Each global role can be granted specific portal permissions.

Permission states

There are three states of permissions: 

Access is granted.

Access is denied.

Access is not granted but also not denied. This type of permission is useful when a certain user belongs to several global roles. So if according to another role, the permission is granted, the user will have the permission in summary, as permissions of all roles are summarized.  

Permission types

Create project — Users can create projects with this permission. 
Manage access:

1. Unlocks the ability to provide Create role permission.

2. Activates the Modify access to a role.

Create role — Users can create roles with this permission. Please note that users can give only those types of permissions to the created roles that they have themselves. 

If, for example, you belong to the Admin role and have all permissions except Manage channels, this means that in other roles (Test role in this case) you won't be able to change this permission. The Manage channels permission and the related Create channel permission will be disabled.  

Manage appearance — Gives users the ability to manage the appearance of the portal. 
Manage channels: 

1. Gives the ability to provide Create channel permission.

2. Activates the Modify access to a channel. 

Manage notifications —  Gives users the ability to customize notifications. 
Manage workflow — Gives users the ability to manage workflow steps of the portal. 
Manage subscriptions — With this permission, users can manage the subscription. 

Role permissions

If the Access permission is enabled for a certain role, you can see this role in the access settings in the view mode.

Enabling the Access permission to the roles gives the ability to see the actions of the enabled roles and add the users of these roles to the projects. 

For example, if you have the Manage subscription permission, you will get a notification when a user from the role that you have access to activates the subscription. However, if you don't have access to the role of a user who activates a subscription, you won't get a notification disregarding your Manage subscription permission.    

Also, you can add users of the enabled roles to the project roles even if Manage access permission is denied.

If you need to be able to modify the role settings, the Manage access permission must be given along with the Modify toggle enabled for a specific role.

Channel permissions 

If the Access toggle is enabled, you can create projects with the enabled channel even if Manage channels permission is denied.

If you need to be able to modify the channel settings, the Manage channels permission must be given along with the Modify toggle enabled for a specific channel.