How do roles and permissions work?

Under Administration → Roles and Permissions, view, create and edit roles.

• System roles are included in every workspace and cannot be deleted.
• Custom roles can be created for your needs.
• All Permissions grants full administrator access, including modules added in the future.

Permissions combine a resource and an action, such as viewing, updating or managing tickets. In areas containing personal data, such as Human Resources, access can be narrowed to scopes like a user's own records or their team's records.

If a role can both submit requests and approve them in the same workflow, the editor warns you. Users still cannot approve their own requests.