Roles and what they grant
Your role is the second half of your Account membership. This is every role the interface names, and what a role does and does not decide.
- System settings
- Web
Your role is half of your Account membership: an Account plus one role. It appears under the Account name in your avatar menu and in the Role column of the Organizations & roles table on your Personal Info page.
A role is not what decides whether you can open an app. Apps are admitted by capability, and pages ask a single resolver for a decision rather than reading your role.
The roles
The Role column can render 11 roles. Generated from evolve-front-end/lib/utils/user-roles.ts, evolve-front-end/app/[lng]/account-page/personal-info/components/Organizations.tsx and evolve-front-end/app/i18n/locales/en/organizations.json by evolve-front-end/scripts/help-generate.mjs.
| Label you see | Role name | Footer diagnostics |
|---|---|---|
| Administrator | SYS_ADMIN |
Yes |
| Student | STUDENT |
No |
| Faculty | FACULTY |
No |
| Admin Staff | ADMIN_STAFF |
Yes |
| Staff | STAFF |
Yes |
| Developer | DEVELOPER |
Yes |
| User | USER |
No |
| Company | COMPANY |
No |
| Participant | PARTICIPANT |
No |
| Company Student | COMPANY_STUDENT |
No |
| Account Admin | ACCOUNT_ADMIN |
No |
The label is what you read; the role name is what your sign-in token carries.
Role name defined in code without a label of its own (1): SUPER_ADMIN. It is not shown in the table above.
A label shared by two role names is a rename in progress: the platform accepts both until the former is retired. STAFF succeeds ADMIN_STAFF the same way, under two labels.
Footer diagnostics is the only role-name difference carried in the table above.
What else a role changes
Beyond the footer diagnostics, only a handful of surfaces read the role name:
- Administrator and Account administrator administer their Account, add Account settings to the avatar menu, and make the Admin apps section visible on Launchpad. See The Account administrator role.
- Developer adds the rescue route and the AI Studio operator surfaces.
- Administrator, Admin Staff and Staff add the translation status page.
Every other role has no gate of its own in the web frontend. What you can reach under such a role comes from the capabilities and app installations attached to your membership, not from the role's name.
Why two people with the same role see different apps
Because the role is only one input. An app appears when all of the following hold for your membership:
- The app is made available to your Account.
- The app is installed for you under the role you selected.
- Policy permits your role in that Account to access it.
- The page you are opening admits you.
Installation is per person, so a colleague with the same role can have an app you do not. See An app is missing.
Changing a role
You cannot change your own role. An Account administrator changes a member's role from Account settings, section Users, using Change role. If you hold more than one role in the same Account, both memberships are listed and you move between them with Switch account; see Switch between Accounts.
Related
Related pages
- The Account administrator role — An Account administrator uses Account Admin to manage an Account's name, sign-in methods, members, roles, spending limits, and billing.
- What an Account is — An Account owns your apps, Spaces and data; it sits inside an Organization, and you hold one role in each Account you belong to.
- An app is missing — An app is absent because it is not available to your Account, not installed for your role, blocked by policy, or not released to production yet.