Managing Control Panel Roles

User roles are used to define the level of authorisation for a logged-in user. Every Control Panel user belongs to a single role. You can control permissions (see the next section) for each role. This in effect determines which tasks each Control Panel user can perform.

By default there are a number of different user roles defined, but you can change these as you see fit. Additionally, you can elect for a role to inherit from another role. An inherited role will have all of the same permissions as the role it inherits from. You can then override any individual permissions as required.

Roles are managed in the Control Panel using the Control Panel Roles widget.

Creating a Role

To create a role, click the New Role button when viewing the list of Control Panel roles. You will be shown the role creation form. Enter a name for the new role, and if you want in to inherit from another role, select the role to inherit from.

Click Create User Role to save your new role. The list of Control Panel roles will now update.

Viewing a Role

To vie the details for a role, click on it when viewing the list of Control Panel roles. The Control Panel Role Viewer widget will now open. This widget shows a list of modules that are available.

Each module has a checkbox beside, which indicates whether or not users of the role you are viewing have access to that module. Click on a module to assign it to or unassign it from a role.

If a role is not assigned, then those users cannot perform any functions related to that module. For example, without access to the pages module, users cannot add page management widgets. This also means they cannot create or update pages.

If you want to have finer-grained control over what a user can and cannot do (for example, you want to allow them to create new pages but not delete existing pages), refer to the next section about permission management.

Editing a Role

To edit a role, either click the Edit link beside the role in the role listing, or click the Edit Role button when viewing a role.

You can now rename the role, as well as changing its parent role.

Note

If you change the parent role you may dramatically impact the permissions of the current role.

Click Save Role Changes to save your changes.

Deleting a Role

If you want to delete a role, you cannot do so until all users belonging to that role are changed to a new role.

Once you have done so, click the Delete Role button when viewing the role. You will be prompted to confirm deletion of the role. Click Yes, delete the role to delete the role.

Any roles that inherit from the role you are deleting will not be deleted. Instead, they will be "promoted". That is, they will now inherit from the parent of the role being deleted.