Help Center Account, team & permissionsSet up

Create a role and set its permissions

A role is a set of permissions you give to several members. Create a role for each job (sales, supervisor, accountant) instead of setting up each person one by one.

6 minUpdated Oct 27, 2026

Open in Corteksa

Before you start · 1 thing · for owners

Knowing the four permission levels

You need: The “Create roles” or “Edit roles and permissions” permission
Learn the levels in Permissions: Allowed, Team-wide access, If responsible, Denied.

Steps

Open Settings → Roles and choose Add Role.

Type the Role Name (at least 3 characters), then choose Create.

The role is saved, and its access levels open in the same window.

In the Units tab, set each unit’s level for view, edit, delete and export, and choose whether add and assign are allowed. See Unit permissions: view, edit, add, delete, export and assign.

In the Social Media tab, set each channel’s level for read, update and delete, and choose whether create is allowed. See Chat channel permissions for each role.

In the Email tab, set up mailboxes the same way. See Mailbox permissions for each role.

In the User & Admin tab, turn on the feature switches the role needs. See Every feature switch in a role.

Choose Update, then give the role to members from Members.

The permissions of signed-in members update straight away.

How it works

A new role isn’t locked down: its records start at If responsible, so it can already open, edit and delete its own records. If you close the window after Create, open the role again with Edit Role to set its levels.

Some feature groups have an Add-on badge: dashboards, deduplication, documents, lead distribution, automations and WhatsApp Web. The badge means the feature is a paid add-on. It doesn’t mean your workspace has bought it.

You can see the members of any role from the role’s page.

If something goes wrong

What you see

Why

What to do

“You can’t grant a permission you don’t have”

The role grants a higher level than yours.

Ask the owner.

“This removes your access to managing roles”

You’re editing a role you hold, and it includes the permission to manage roles.

Confirm it explicitly if that’s what you meant. See Delete a role, and the rules that keep roles safe.

Saving the role didn’t apply to a member

The member wasn’t given the role.

Give it to them from Edit a member, change their roles or deactivate them.

A real example

Shield Security Co.

The situation

The accountant needs to see contracts and export them, without editing them.

What they did

An “Accountant” role: on the “Contracts” unit, view Allowed, export Allowed and edit Denied.
On the “Clients” unit, view Allowed only, and every channel Denied.

The result

The accountant pulls their own reports, and can’t edit a contract by mistake.

A made-up company, to show the idea. The numbers are rounded.