Create a Role
This page walks through creating a role, deciding what it can access on each table, and putting a user in it. When you're finished the role is ready to sign in and work.
Managing roles requires an application where your role has admin access. Only a full Administrator can create or edit roles; a Limited Admin cannot change any role's permissions, including its own.
Steps
-
Open Application Settings and look at the Access panel, then click Roles.
-
Click Add Role to open the role editor. It has General Settings at the top and, in edit mode, the Table Permissions panel below.
-
In General Settings, enter the Role Name (required) and an optional Description, then set the role's flags:
- Is Admin: full application administration.
- Is Limited Admin: limited administration, scoped to tables and fields the role already has access to.
- Can Invite: allows this role to add and remove application users.
- Read Only: blocks creating, editing, and deleting records anywhere in the application.
- Enable Application Searches: shows the Application tab in the global search palette.
-
Still in General Settings, set the two required choices:
- Default Dashboard: the screen a user with this role sees when opening the application.
- Role Menu: the navigation this role sees. Pick Application Default to share the application's menu, or a specific menu for a custom navigation.
-
In Table Permissions, select a table (use Search Tables... to filter) and turn on the switches the role needs:
- Has Access is the master switch; everything else stays disabled until it's on.
- View Records, Add Records, Edit Records, and Delete Records control record actions. Next to view, edit, and delete you can add a Condition to scope the permission to specific records, for example letting users edit only records they own.
- Create Common Reports, Access Table Settings, and Manage Permissions control reporting and configuration rights on the table.
- The User Interface card sets the role's Default Dashboard and Default Form for the table, plus Allow Imports, Show Search, and the Hide toggles that remove record buttons from the interface.
- The Field Permissions grid controls access per field: toggle Has Access, View, Add, and Edit for each field.
-
Click Save to store the role.
Assigning users to the role
-
In Application Settings, click Users in the Access panel.
-
Click Add User, enter an email address, and pick the role. If the person doesn't exist on the instance yet, High Systems creates the account and sends them an invitation; turn off Send Email to skip the invitation. To add several people at once, use Add Users instead.
-
Click Save. Each user holds exactly one role per application, so changing what someone can do means editing their role on this screen.
Checking your work
Open the user menu in the top-right and choose Test as Role. Pick the new role; your session switches to it so you can see exactly what that role can reach. The header shows the impersonated role with an End Test button to switch back.
Where to go next
- Read the full permission model: Permission types reference
- Understand how roles fit into the platform: Permissions guide
The same role management is available through the REST API. See the Roles endpoint reference.