How to Create and Manage Security Roles

Note: the built-in help tip mentioning an "Everyone" role is stale — no such role exists by default; the three seeded roles are Members, Team Members, and Administrator (Full Access).

Create a role, or adjust an existing one's rights, description, or session timeout.

Before you start

The Configure System right (gates this entire Essential Setup section).

Steps

Create a role

1. Go to Settings → Essential Setup → Security Roles.
2. Click Add Role.
3. Enter a Role Name (required, 2–50 characters) and an optional Description.
4. Optionally set a Session Timeout (minutes) — leave blank to inherit the default.
5. Assign rights: expand the General Permissions group, plus one group per app your organization has enabled (CRM, HRS, Docs, etc.), and the always-present Access Security, Accounting & Finance, and Administration groups. Set each right to Granted, Not Specified, or Nuke.
6. Use the search box (appears once a group has more than 8 rights) to jump to a specific right — matches keep their parent rights visible for context.
7. Use a parent right's grant branch / revoke branch buttons to set its whole subtree at once, instead of clicking every child individually.
8. Click Save.

Edit or delete a role

• Click a role to edit it the same way. System roles may have their name and/or rights locked — a locked field is disabled with an explanation.
• Click Delete to remove a custom role. Confirm: "Are you sure you want to delete the security role '{name}'? This will remove all associated permissions and cannot be undone." System roles marked non-deletable can't be removed this way.

What you'll see

Granting or denying a right automatically cascades to its parents/children in the same action, with an undo toast telling you exactly what else moved. See Security Roles Explained for how a role's rights combine with Department, Job Title, and member-level overrides into a member's actual effective permissions.