Create Roles with Least Privilege


Published May 15, 2026 · Updated Sep 21, 2026 9:22 PM

Build responsibility-based roles, test their permissions, and avoid granting broader access than a user needs.

roles permissions security user management onboarding

Design the role

  1. Open Settings > Users > Roles.
  2. Create a role for one responsibility, such as Dispatcher, Technician, or Manager.
  3. Select only the permissions needed for that responsibility.
  4. Assign the intended users in the role form and save.

Test the result

Ask a representative user to confirm that required navigation and records are available and restricted areas are not. A visible tab and the ability to act on its records are separate permission checks, so test the actual workflow.

Improve an existing role safely

  • Add the smallest missing permission instead of assigning a broader role.
  • Remove access that is no longer required, then retest.
  • Keep the Owner role limited to genuine workspace owners.
  • Review role membership when job duties change.

Onboarding only checks that a non-owner role exists; it does not certify that the role is safely designed.

Related guides

Search

More guidance related to this article.

Need more help?

If this article doesn’t solve it, send us a message and we’ll help directly.

Contact Support