Adjust role permissions for an app

The Roles & Permissions grid shows, per app, which features each role can see. You can grant a feature to a role or mask one away as a global override on top of the standard baseline — and always revert.

Before you start

• Sign in to the admin console with CollabKare staff access.
• Go to Platform & Governance → Roles & Permissions.
• Understand the scope: these overrides change what users see in the apps (menus, pages, features). They do not change underlying data access, which is enforced separately.

Steps

1. Select the app you want to adjust. The grid loads with roles as rows and features as columns; each cell shows whether that role currently sees that feature and where that setting comes from (baseline or override).
2. Click a cell to stage a change. Clicking cycles through the sensible next state:
   • a feature that's on gets a staged mask (hide it),
   • a feature that's off gets a staged grant (show it),
   • an existing override gets a staged revoke (back to baseline),
   • clicking a staged cell again undoes the staged change.
3. When you're happy, use the publish bar at the bottom: Publish applies all staged changes, or Discard throws them away. After publishing you'll see a confirmation — users pick up the changes at their next login.

Tips / Troubleshooting

• To wipe a role's overrides entirely, use the reset control on the role's row — you'll be asked to confirm resetting that role to the matrix baseline; all its global overrides are revoked (restorable from audit).
• Click Audit history in the page header to open a drawer listing recent permission changes.
• Changes are invariant-checked when published; if a change would break a safety rule, the publish is refused with an error.