An administrator narrows what staff can do
Who is involved
| Role | What they do |
|---|---|
| Tenant admin | Removes a permission from a role. |
| Employee | Uses PDF tools and sees the effect. |
Step by step
- Employee
Opens the PDF tools overview.
What they see:The tools their role allows, including Make a scan searchable.
- Tenant admin
Opens Settings, Roles, and takes the scan-reading permission off the Employee role.
What they see:The role is saved.
- Employee
Reloads the overview or signs in again.
What they see:The scan tool tile is gone.
- Employee
Tries to run a scan job from an old tab or a saved link.
What they see:A refusal that names the missing permission, rather than a failure after the upload.
- Tenant admin
Puts the permission back.
What they see:The tool returns for staff once their session picks up the change.
Who is told what
Staff are not told that a tool was switched off; they see it disappear or be refused.