Permission Updated09:24
AI Administrator · Export granted on Analytics.
Leo Emerson
Users & Roles
Role & Permission Management
Manage roles, permissions and access policies.
MFA enforced
SSO connected
Policy synced 09:24
Total Roles
155 system
Custom Roles
10+2 this month
Active Users
20513 roles
Pending Invitations
186 over 14 days
Permission Groups
714 modules
Last Updated
09:24by Leo E.
Filter Roles
Narrow the list by type, workspace, department, status or level.
15 of 15 roles match
0 roles selected
Roles
15 of 15 roles · 0 selected
| Role | Description | Users | Department | Permissions | AI Access | Modified | Status | Actions | |
|---|---|---|---|---|---|---|---|---|---|
| Super AdminSystem · locked | Unrestricted control, including billing and role definitions |
+14
|
Executive | 98 / 98 | Full | 2 days ago | Active | ||
| Organisation AdminSystem · Corporate | Everything except billing and the Super Admin role itself |
+19
|
Executive | 88 / 98 | Full | 5 days ago | Active | ||
| AI AdministratorAI role · AI Studio | Owns models, prompts, knowledge bases and automation |
+51
|
AI Platform | 58 / 98 | Full | Today, 09:24 | Active | ||
| Workspace ManagerCustom · Core Platform | Manages one workspace, its members and its content | THNFSO+11 | Operations | 46 / 98 | Standard | Yesterday | Active | ||
| DeveloperCustom · Core Platform | Full access to code generation and API keys, no billing |
+38
|
Engineering | 44 / 98 | Standard | 3 days ago | Active | ||
| Prompt EngineerAI role · AI Studio | Writes and publishes prompt templates and custom instructions |
+32
|
AI Platform | 36 / 98 | Elevated | Today, 08:02 | Active | ||
| AI TrainerAI role · AI Studio | Uploads training data and approves knowledge base changes |
+17
|
AI Platform | 33 / 98 | Elevated | 4 days ago | Active | ||
| Data AnalystCustom · Growth | Reads everything, exports reports, changes nothing |
+27
|
Analytics | 26 / 98 | Read-only | 6 days ago | Active | ||
| MarketingCustom · Growth | Social, email and content generation with brand voice locked |
+32
|
Marketing | 24 / 98 | Standard | Yesterday | Active | ||
| SalesCustom · Growth | Proposals, invoices and email generation for their own accounts |
+24
|
Revenue | 22 / 98 | Standard | 2 days ago | Active | ||
| SupportCustom · Core Platform | Live conversations and bot supervision, no policy changes |
+39
|
Customer | 25 / 98 | Standard | Today, 07:41 | Active | ||
| FinanceCustom · Corporate | Invoices, billing and usage exports; no AI configuration |
+25
|
Finance | 18 / 98 | Restricted | 1 week ago | Active | ||
| HRCustom · Corporate | People records and onboarding; AI limited to document drafting | HCNO+4 | People | 16 / 98 | Restricted | 2 weeks ago | Active | ||
| GuestSystem · external | Invited to a single shared item, expires after 30 days |
+22
|
External | 6 / 98 | None | 3 weeks ago | Pending | ||
| ViewerSystem · superseded | Replaced by Data Analyst — kept for the 57 historic assignments |
+17
|
External | 9 / 98 | Read-only | 1 month ago | Archived |
Permission Matrix
Editing AI Administrator · 14 modules × 7 permission groups
58 granted
| Module | View | Create | Edit | Delete | Export | Approve | Manage |
|---|---|---|---|---|---|---|---|
| Dashboard | |||||||
| AI Chat | |||||||
| AI Playground | |||||||
| Code Generator | |||||||
| Website Generator | |||||||
| Report Generator | |||||||
| Invoice Generator | |||||||
| Email Generator | |||||||
| Social Media | |||||||
| Knowledge Base | |||||||
| AI Bots | |||||||
| Automation | |||||||
| Analytics | |||||||
| Settings |
AI Role Settings
What this role may do with the models themselves.
Allow AI training and Code execution are off for every role in this organisation. Turning either on changes what leaves your tenant.
Security Policy
Applied to every member of the selected role.
Permission inheritance
Child roles start from this role's grants.
Enabled
Role hierarchy
Sits two levels below the organisation root.
Level 3
Approval workflow
Widening a permission needs a second approver.
2 approvers
Multi-factor required
Enforced at sign-in, no grace period.
Mandatory
IP restriction Mock
Not enforced — members travel and work remotely.
Off
Session policy
Re-authentication required for destructive actions.
8 hours
Concurrent sessions
Oldest session ends when the limit is reached.
3 devices
Credential rotation
API keys issued under this role expire on schedule.
90 days
Device trust Mock
Unmanaged devices are allowed but flagged in the audit trail.
Advisory
Recent Changes
Across every role in the organisation.
Role CreatedYesterday
Prompt Engineer, cloned from AI Administrator and narrowed.
Marcus Bell
User AssignedYesterday
6 members moved from Viewer to Data Analyst.
Policy Updated2 days ago
Multi-factor made mandatory for all critical roles.
Role Cloned4 days ago
AI Trainer created from Prompt Engineer.
Workspace Linked6 days ago
Growth workspace attached to Data Analyst.
Permission Revoked1 week ago
Data Analyst · Delete removed from Billing after review.
Rosa Lindqvist
Access Reviewed2 weeks ago
Quarterly review signed off. 12 of 15 roles unchanged.
Members Removed4 weeks ago
9 contractors unassigned when the External role lapsed.
Devendra Rao
Role Archived1 month ago
Viewer archived. 57 assignments kept for audit.