Skip to main content

Edit a role's permissions

Change what a role means in your organisation. Under the organisation's role settings; needs organisation-admin access.

Steps​

  1. Open the organisation's role settings.
  2. Choose the role.
  3. Toggle the permissions it grants — see the permission matrix.
  4. Save.

It applies immediately, to everyone holding that role. No release is needed, because Yessort never checks a role by name — every decision resolves through the matrix you have just changed.

This affects everyone with the role​

There is no per-person override. If one person needs something different, either give them a different role or accept that the change applies to all holders.

Worth saying to yourself before saving: everyone who is a member will now be able to do this.

Owner cannot be edited​

Owner ignores changes to other roles, and its own permissions are fixed.

That is the safety net. Since the other four are editable, an organisation could otherwise remove every route to administering itself. Owner guarantees a way back.

Three entries that will not do what you expect​

billing: manage is owner-only. You can grant it to admin and it will not take effect. If someone must manage billing, they need to be an owner.

goods_receipt has only accept. There is no read permission to grant — purchasing pages are read through supplier: read. If someone cannot see receiving documents, that is the permission to check.

organization, member, invitation and team have no read action. Seeing who is in the organisation is not separately gated.

Grant read alongside update​

A role with update but not read on a resource can change something it cannot look at. Yessort permits it and it is almost never intended.

You cannot lock yourself out of the editor​

The ability to edit roles is guarded against being used to remove your own access to it.

That guard covers the editor specifically. It does not stop you making a role much less useful than intended in other ways — and the people affected will see their screens change without knowing why.

Changing your mind​

Toggle it back. There is no versioning of role definitions, so if you want a record of what changed and when, the audit log is where to look.