Overview
Custom user roles allow admins to create specialized roles with specific permission sets that go beyond the standard built-in roles (Member, Creator, Admin, Consumer). This feature is particularly useful for large organizations that need to partition resource access and coordinate permissions across different teams or departments.
With custom roles, you can create roles tailored to your organization's needs—such as a security-focused role that can view datasources and audit logs but cannot modify settings, or a limited admin role that can manage certain settings without access to all user audit logs.
Important: Each user can only have one role at a time. Custom roles replace the user's built-in role entirely—users cannot have both a built-in role and a custom role, or multiple roles simultaneously.
Creating a Custom Role
Navigate to Settings > Team > Manage roles
Note: You must be an admin to access this page
Click Create role
Enter a name for your custom role
Choose a descriptive name that clearly indicates the role's purpose (e.g., "Security Auditor" or "Limited Admin")
Select the permissions you want to include in this role
Review the available permission sets and check the ones that apply to this role
For details on what each permission allows, see Roles and permissions
Click Save to create the role
Editing a Custom Role
Find the custom role you want to edit
Click on the role name or the Edit button
Modify the role name or adjust the permission sets as needed
Click Save to apply your changes
Deleting a Custom Role
Find the custom role you want to delete
Click the Delete button
Note: You cannot delete a custom role if users are currently assigned to it. You must first reassign those users to a different role before deletion is allowed.
Assigning Custom Roles to Users
You can assign custom roles to users in two ways:
Through Team Management
Go to Settings > Team
Find the user you want to assign a custom role to
Click on their current role in the role column
Select the custom role from the dropdown menu
The change takes effect immediately
Through SAML Settings
Custom roles can also be assigned automatically through SAML attribute mapping. This allows you to map SAML attributes to custom roles for automatic role assignment during user login.
For more information, see How to set up SAML attribute groups for automatic group assignment
Finding Users with a Specific Custom Role
To find all users assigned to a particular custom role:
Go to Settings > Team
Use the search input at the top of the team listing
Type the name of the custom role
The list will filter to show only users with that role