Create a role
Make a role that grants exactly what a group of people needs, such as Support or Finance.
- In Admin, open Roles & permissions and click New role.
- Enter a Name. Optionally add a Description, shown in the role list, and a Color for the role's chip.
- Under Permissions, tick what the role grants. Tick a group's header to grant everything in the group, or search to find a permission.
- Click Create role.
Then give it to people from their user page; see Change someone's roles. What each permission allows is listed in Permissions.
Edit or delete a role
Click the role in the list, make your changes and click Save. To delete it, click Delete role under Danger zone and confirm. Everyone who held it loses it.
The Administrator role
The built-in Administrator role always grants every permission, including ones added in later versions. You can change its name and description but not its permissions, and you can't delete it.
Good to know: creating a role fails if its name is Admin or Sysadmin, or if another role's name differs from it only in case, spaces or punctuation (such as "Sales team" and "sales-team"). Pick a more distinct name.