Identify, change, and create permission roles

See a permission role

One way to see or modify which permission group a person is in is to go to the People page.

Each person has a permissions group field where users can see or change their permission group.

If the Permission Group field isn't visible, users can bring the field into the People page by going to Fields and selecting Permission Group.

The People page

Alternatively, to see or modify which permission group a person is in, users can go to a profile page and look for the Permission Group field in the Person Info tab.

Change a permission role

Not every user has permission to modify the permission group field. If users require a higher level of access, they will need to get someone with a higher permission level to either change their permission role, or change the access that their current role has.

Create a permission role

New roles can be created, and existing roles can be deleted, but it's important to note that deleting a permission role cannot be undone.

It is advised that the built-in permission roles work as the default roles. If a new role is needed, the permission role that best matches to the required role can be duplicated and then modified to work for a user's needs.

There are cases where a company might need to create custom permission roles.

Consider the following example:

A Producer needs access to fields that contain sensitive financial information. This information needs to be restricted.
With the default permission roles, they would have to choose between the Admin and Manager roles.

The Admin and Manager roles

Site administrators decide that:
- They do not want Producers to create new fields. They only want them to be able to see and edit financial fields. This would suggest that the Manager role would be a better choice than the Admin role.
- Site administrators also decide they do not want people with Manager permissions to have access to financial fields, because there are many types of users within that permission role, including production coordinators and art leads.
To handle these requirements, site administrators do two things:
- A new permission role is made called Producer. It is a duplicate of the Manager permission role.
- Next, the field permissions for the Manager role are updated so that Managers cannot See any financial fields.

Admin, Producer, and Manager roles

Producers can now see and update financial information, Managers cannot see the financial information, and Admins don’t have to worry about Producers creating new fields.

To update the control within a permission level

By default, only Admins can access the People Permission settings.

If a user is a part of any permission role other than Admin, they will need to reach out to an Administrator to confirm what their role does and does not give permission to see and update in Flow Production Tracking.

The People Permission settings

Understand default permission roles - Quiz