Roles (Scope Sets)
A scope set is a named, reusable bundle of scopes. It's the platform's "role" mechanism: define a role once, then attach it to users, groups, or API keys instead of editing each one's scope list by hand.
One concept, two names
You'll see this called a Role in the admin interface and a Scope Set in the API. They're the same thing — a reusable collection of scopes.
Why use them
- Define once, reuse everywhere — when permissions change, edit the scope set and every principal that references it updates automatically.
- Consistency — give every "Client Manager" or "Prepress Operator" the same access without re-selecting scopes each time.
WARNING
Deleting a scope set immediately revokes its scopes from every user, group, and API key that referenced it. Check what references a set before deleting it.
See also
- Scopes — the individual permissions a role bundles.
- Admin › Scope Sets — the API for creating and managing roles.
- Admin › Access Control — managing roles in the interface.
