Understand roles and permissions

A role defines what a member can view or change inside an organization. Role changes affect access immediately, so assign the lowest level of access that allows the person to do their work.

Default roles

Sumyro organizations can use these default roles:

• Owner has full access to organization resources and settings.
• Admin can manage members, billing, and most organization settings.
• Member has basic organization access.

The controls shown in the application depend on the member's role and the active organization.

Before managing custom roles

• Switch to the intended organization.
• Open Settings → Roles.
• Confirm that Create role is available.

The Roles page appears only when custom roles are available and your current role can manage them.

View a role

Open the actions menu beside a role and select View permissions. The details show which organization, member, invitation, and billing actions that role can perform.

Create a custom role

1. Select Create role.
2. Enter a unique role name using the format shown in the form.
3. Add a short description.
4. Choose its position in the role hierarchy.
5. Select the permissions the role needs.
6. Review the choices and select Create role.

Default role names cannot be reused. A custom role's name cannot be changed after creation.

Edit a custom role

1. Open the role's actions menu.
2. Select Edit role.
3. Update its description, hierarchy position, or permissions.
4. Select Save changes.

Members assigned to the role receive the updated permissions immediately.

Delete a custom role

Open the role's actions menu and select Delete role. A role cannot be deleted while it is assigned to a member or a pending invitation. Reassign the members and cancel the pending invitations first. Send new invitations with a different role when needed.

Troubleshooting

Roles is not shown in Settings

Custom roles may not be available, or your role may not allow you to manage them. Default roles can still be assigned from Settings → Members when your permissions allow it.

Permission Required appears

Ask an organization owner to review your role. Opening the page directly does not let you manage roles.

A role cannot be deleted

Open its details to check whether members or pending invitations still use it. Move each member to another role, cancel every pending invitation that uses the role, then try again.

A member still has the wrong access

Check both the member's assigned role in Settings → Members and the role's permissions in Settings → Roles.