A custom role is created and given to a colleague
Who is involved
| Role | What they do |
|---|---|
| Tenant admin | Builds the role and assigns it. |
| Employee | Receives the new access and uses it. |
Step by step
- Tenant admin
Opens Settings, Roles, clones a built-in role and removes what the job does not need.
What they see:The new role appears under Custom.
- Tenant admin
Adds the colleague on the role's page.
What they see:The role shows one member.
- Employee
Carries on working, with no need to refresh or sign in again.
What they see:New menu items and buttons appear on their next click.
- Employee
Opens a screen the role does not allow.
What they see:The server refuses and the screen shows no access.
- Tenant admin
Opens the role's page again.
What they see:The colleague is listed as a member. The grant is also written to the platform's audit trail, which the Audit log screen does not list yet.
Who is told what
The colleague is not notified; tell them the access exists.