--- title: Custom roles url: https://www.tines.com/docs/admin/user-administration/custom-roles/ updated: 2026-05-05T23:03:55+00:00 --- *[tines.com](https://www.tines.com/llms.txt) › [Docs](https://www.tines.com/llms.txt) › [Admin](https://www.tines.com/llm/docs/admin.md) › [User administration](https://www.tines.com/llm/docs/admin/user-administration.md)* # Custom roles *[View on tines.com](https://www.tines.com/docs/admin/user-administration/custom-roles/)* # Introduction Custom roles are administrator-defined permissions to access a team. All custom roles start from the Tines default roles: viewer, builder, manager. A user can have multiple roles in a tenant, but only one role per team. You can see more information about team roles [here](https://www.tines.com/docs/admin/teams/#roles). > **TIP:** For example: Diane might have read and write permissions in Team A, but, only have view permissions for cases in Team B. You can turn on and off individual features for that user role. --- ## Creating a custom role Administrators own creating custom roles. [](https://demo.arcade.software/UY8nEVk55IoEKFXTO4VT?embed&embed_mobile=tab&embed_desktop=inline&show_copy_link=true) 1. Navigate to `Roles` within the admin dropdown 2. Choose the **New Role** button on the bottom right corner of the modal 3. Name the role 4. Give a description, this appears below the role for other users 5. Customize the feature level permissions (see the feature table below) 6. Click `Create` in the bottom left of the modal > **NOTE:** > A maximum of 25 custom roles can be created per tenant. > > Custom roles are part of our Enterprise Tenant Management features and aren't available for all plans. Please reach out to your Tines point of contact to learn more about adding them to your plan. ## Updating custom roles Administrators can make updates to custom role permissions. To do this, they: 1. Navigate to `Roles` within the admin dropdown 2. Click the role you want to edit 3. Change the permissions 4. Click `Update` As a reminder, you cannot change the role name, only the permissions. ## Feature permission list These features allow granualar access. They are binary (on or off). The table details what permissions enabling the feature allows. Below is a brief overview of those permissions. - **`View`** permissions allow a builder to see the information, but not interact with it. - `**Write**` permissions allow a builder to update the information, but not perform destructive or permissive actions (add members, change permissions, etc.). `Create` & `update` permissions also fall under this category. - **`Manage`** permissions allow the builder to move, change permissions, or perform destructive actions. This should be limited to roles where a builder can perform destructive actions. `Delete` permissions also fall under this category. Note: Assigning a less restricted permission for a feature will not allow that role to inherit the more restricted permissions - e.g., assigning a Manage type permission will not grant the role the Edit and View type permissions for that feature, so when adding a Manage permission you will typically want to add the Edit and View permission for that object type as well. ### Stories | **Feature** | **Sub feature** | **Permission** | **Notes** | | --- | --- | --- | --- | | **Actions** | Run script | Create | Create Run script actions. *Also requires Story update permissions.* | |   | Run script | Update | Update Run script actions. *Also requires Story update permissions.* | |   | Run script | Delete | Delete Run script actions. *Also requires Story update permissions.* | |   | Event Transform in automatic mode | Create/Update | Create and update Event Transform actions in automatic mode. *Also requires Story update permissions.* | |   | Event Transform in automatic mode | Delete | Delete Event Transform actions in automatic mode. *Also requires Story update permissions.* | | **Change Control** | | Manage | Toggle change control. Review change requests. Set change control notifications webhook. | | | | Review | Review change requests. | | **Credentials** | | Manage | Move, Delete credentials. | | | | Update | Update credentials. | | **Events** | | Manage | Delete events. Delete story data. | | **Folders** | | Create | Create folders. | | | | Manage | Delete folders. | | **Page Themes** | | Create | Create page themes. | | | | Manage | Delete page themes. | | | | | | | **Resources** | | Manage | Delete, Move resources. | | | | Update | Update resources. | | **Stories** | | Create | Create and import stories. | | | | Manage | Delete, Import, Move stories. Approve change requests. Delete logs and events. | | | | Run | Run stories. | | | | Update | Update stories. | ### Cases Cases is built on granular permissions for every component within a case. See [roles and permissions](https://www.tines.com/docs/roles-and-permissions/) in cases for more information. | Feature | Permission | Notes | | --- | --- | --- | | **Actions** | Create | Add an action to a case. | | | Delete | Remove an action from a case. | | | Run | Run an action on a case. | | | Update | Update an action on a case. | | **Assignees** | Update | Add or remove assignees from a case. | | **Blocks (Notes)** | Create | Create a note block. | | | Delete | Delete all note blocks. | | | Update | Update all note blocks. | | **Cases ** | Bulk manage cases | Manage cases in bulk. Requires additional "update" permissions for each case component a user is allowed to update in bulk. | | | Create | Create a new case. | | | Delete | Delete a case. | | | View | View all cases and case content. | | | Update | Update case name and basic fields. | | | Update security settings | Update team-level case security settings | | | View sensitive information | View case fields marked as sensitive. | | **Closure conditions** | Override closure conditions | Override closure conditions whenever updating a case or changing status. | | **Comments** | Create | Add a comment to a case. | | | Delete | Delete your authored comments only. Delete any comment if granted the "Cases > Manage" permission. | | | Update | Update your authored comments. Update any comment if granted the "Cases > Manage" permission. | | **Comment reactions** | Create | Add a reaction to a comment. | | | Delete | Remove a reaction from a comment. | | **Description** | Update | Update case description content. | | | Update task status | Mark a task as complete or incomplete within a case description. | | **Fields** | Create | Create new case field definitions. | | | Delete | Delete case field definitions. | | | Update | Update existing case field definitions. | | **Field values** | Create | Add an existing field to a case. | | | Delete | Remove a field from a case. | | | Update | Update or reset field values on a case. | | **Files** | Create | Attach a file to a case. | | | Delete | Delete files you've attached to a case. Delete any files if granted the "Cases > Manage" permission. | | **Links** | Create | Link a case to another case. | | | Delete | Unlink cases from each other. | | **Metadata** | Update | Update metadata values. | | **Priority** | Update | Change the priority of a case. | | **Records** | Create | Add a record to a case. | | | Delete | Remove a record from a case. Removing a record from a case does not delete the record itself. | | **Saved views** | Create | Create a saved view in Cases. | | | Delete | Delete a saved view in Cases. | | | Update | Update a saved view in Cases. | | **SLAs** | Create | Create SLA rules on a case. | | | Delete | Delete SLA rules from a case. | | | Update | Update SLA rules on a case. | | **Status** | Create | Create new case status definitions. | | | Delete | Delete case status definitions. | | | Transition | Change a case's status value. | | | Update | Update existing case status definitions. | | **Subscribers** | Create | Subscribe users to a case. | | | Delete | Unsubscribe users from a case. | | **Tags** | Update | Add or remove tags on a case. | | **Tasks** | Assign tasks | Assign a task to one or more users within the team or case group. | | | Complete tasks | Mark tasks complete or incomplete. | | | Create tasks | Add tasks to a case, case template, or "create case" story action. | | | Delete tasks | Delete tasks from a case. | | | Edit tasks | Change the name of an existing task. | | | View tasks | View tasks within a case. | | **Templates** | Create | Create new case layout templates. | | | Delete | Delete case layout templates. | | | Update | Update existing case layout templates. | | **Webhooks** | Create | Create webhooks on a case. | | | Delete | Delete webhooks from a case. | | | Update | Update webhooks on a case. | ### AI | **Feature** | **Permission** | **Notes** | | --- | --- | --- | | **Presets** | Create | Author Workbench presets. | |   | Run | Use Workbench presets. Any credentials that are configured on the preset will work but people with this permission cannot access those credentials directly. | ### Records | **Feature** | **Permission** | **Notes** | | --- | --- | --- | | Records | View | View record types, record reports and records. | | Records | Create | Add new records. | | Records | Update | Update record field values. | | Records | Update record report filters | Update the filters of a record report. | | Records reports | Manage | Create, Update, Delete, Export record reports. * This is specific to the **records reports** section* | ### Other | **Feature** | **Permission** | **Notes** | | --- | --- | --- | | **Read** | View | Gives the user the ability to read all things within a team. In order to view cases, records, dashboards, and/or stories, please be sure to enable this | | **Teams** | Manage | Delete a team. Edit, delete, move page collections. Add, remove team members. Manage team member roles | | **Templates** | Create | Create templates within a team. | |   | Update | Update templates within a team. | |   | Delete | Delete templates within a team. | |   | Manage | Manage templates within a team, or share with other teams. | ## Permission templates To help get started, you can choose to start from a team role template. Then customize from there. This auto-enables the [team RBAC](https://www.tines.com/docs/admin/teams#team-roles) feature permissions. | **Permission template** | **Definition** | | --- | --- | | **Viewer** | If you choose this template, any feature permission not enabled will default to **read-only** access. *Note: any feature disabled on another user role defaults to view-only for that role.* | | **Editor** | This permission grants **read and write** access for the enabled features within the team. | | **Team admin** | This permission grants **read and write** access for the enabled features within the team. This includes the ability to ***perform destructive actions,*** such as deleting. | | **Workbench user** | This permission grants access to **use configured presets** on the team. Any **credentials that are configured on the Workbench preset may be used** **only through Workbench** but cannot be changed or viewed. Users cannot access any other part of Tines in that team. | All disabled features default to view-only. ### Take a look [Take a look at creating a role](https://stream.mux.com/SzC00S5PRBYHb42M3PQmJF8jFaWRmnD6b/high.mp4)