Roles (Scope Sets)
The Roles screen is where administrators build and manage reusable permission bundles. In the API these are called Scope Sets — they are the same thing. For the concept, see Roles (Scope Sets).
What you can do
- Browse existing roles (scope sets).
- Create a role by naming it and selecting the scopes it should bundle.
- Edit a role's scopes — every user, group, and API key that references it updates automatically.
- Delete a role.
WARNING
Deleting a role immediately revokes its scopes from every user, group, and API key that referenced it. Check what references it first.
Required access
| Action | Scope |
|---|---|
| View roles (scope sets) | scope_sets:read |
| Create, edit, or delete | scope_sets:write |
See Scopes for the full catalogue.
Related
- Roles (Scope Sets) (concept) — how roles relate to scopes, users, and groups.
- Admin › Scope Sets (API) — the underlying API.