---
title: Roles and what they grant
type: reference
section: system
summary: Your role is the second half of your Account membership. This is every role the interface names, and what a role does and does not decide.
applies_to:
  clients: [web]
sources:
  - evolve-front-end/lib/utils/user-roles.ts
  - evolve-front-end/lib/auth/platform-role-checks.ts
  - evolve-front-end/app/[lng]/account-page/personal-info/components/Organizations.tsx
  - evolve-front-end/app/i18n/locales/en/organizations.json
  - evolve-front-end/lib/auth/app-access/index.ts
generated: evolve-front-end/scripts/help-generate.mjs
verified:
  at: 2026-09-04
  env: code
  by: content-lane-system
ttl_days: 45
related: [system/account-administrator, system/what-an-account-is, system/an-app-is-missing]
---

[//]: # (help-generate begin human:intro)

Your role is half of your Account membership: an Account plus one role. It appears under the Account name in your avatar menu and in the **Role** column of the **Organizations & roles** table on your **Personal Info** page.

A role is not what decides whether you can open an app. Apps are admitted by capability, and pages ask a single resolver for a decision rather than reading your role.

[//]: # (help-generate end human:intro)

## The roles

The **Role** column can render 12 roles. Generated from `evolve-front-end/lib/utils/user-roles.ts`, `evolve-front-end/app/[lng]/account-page/personal-info/components/Organizations.tsx` and `evolve-front-end/app/i18n/locales/en/organizations.json` by `evolve-front-end/scripts/help-generate.mjs`.

| Label you see | Role name | Footer diagnostics |
| --- | --- | --- |
| **Administrator** | `SYS_ADMIN` | Yes |
| **Student** | `STUDENT` | No |
| **Faculty** | `FACULTY` | No |
| **Admin Staff** | `ADMIN_STAFF` | Yes |
| **Staff** | `STAFF` | Yes |
| **Developer** | `DEVELOPER` | Yes |
| **User** | `USER` | No |
| **Company** | `COMPANY` | No |
| **Participant** | `PARTICIPANT` | No |
| **Company Student** | `COMPANY_STUDENT` | No |
| **Account administrator** | `TENANT_ADMIN` | No |
| **Account administrator** | `ACCOUNT_ADMIN` | No |

The label is what you read; the role name is what your sign-in token carries.

One label is carried by more than one role name: **Account administrator** (`TENANT_ADMIN`, `ACCOUNT_ADMIN`).

Role name defined in code without a label of its own (1): `SUPER_ADMIN`. It is not shown in the table above.

[//]: # (help-generate begin human:role-names)

A label shared by two role names is a rename in progress: the platform accepts both until the former is retired. `STAFF` succeeds `ADMIN_STAFF` the same way, under two labels.

Footer diagnostics is the only role-name difference carried in the table above.

[//]: # (help-generate end human:role-names)

[//]: # (help-generate begin human:role-surfaces)

## What else a role changes

Beyond the footer diagnostics, only a handful of surfaces read the role name:

- **Administrator** and **Account administrator** administer their Account, add **Account settings** to the avatar menu, and make the **Admin apps** section visible on Launchpad. See [The Account administrator role](/help/system/account-administrator).
- **Developer** adds the rescue route and the AI Studio operator surfaces.
- **Administrator**, **Admin Staff** and **Staff** add the translation status page.

Every other role has no gate of its own in the web frontend. What you can reach under such a role comes from the capabilities and app installations attached to your membership, not from the role's name.

[//]: # (help-generate end human:role-surfaces)

[//]: # (help-generate begin human:same-role)

## Why two people with the same role see different apps

Because the role is only one input. An app appears when all of the following hold for your membership:

1. The app is made available to your Account.
2. The app is installed for you under the role you selected.
3. Policy permits your role in that Account to access it.
4. The page you are opening admits you.

Installation is per person, so a colleague with the same role can have an app you do not. See [An app is missing](/help/system/an-app-is-missing).

[//]: # (help-generate end human:same-role)

[//]: # (help-generate begin human:changing)

## Changing a role

You cannot change your own role. An Account administrator changes a member's role from **Account settings**, section **Users**, using **Change role**. If you hold more than one role in the same Account, both memberships are listed and you move between them with **Switch organization**; see [Switch between Accounts](/help/system/switch-accounts).

[//]: # (help-generate end human:changing)

[//]: # (help-generate begin human:related)

## Related

- [The Account administrator role](/help/system/account-administrator)
- [What an Account is](/help/system/what-an-account-is)
- [An app is missing](/help/system/an-app-is-missing)

[//]: # (help-generate end human:related)