Role Management
When to use this screen
Use this to define roles, attach permissions, and assign staff to roles. This is why an operator can see User Management but not Ban.
Who can open it / who to ping
- Open: User role manage.
- Ping security before granting Ban, payout approve, automation run, or tax invoice.
- Superusers bypass many checks; do not add people to a “god role” to skip a ticket.
Find the record
- Open Admin → Account Administration → Role Management.
- Pick a role, review its permissions, or create a role.
- Assign or remove staff from the role.
Happy path
- Confirm the least-privilege set for the job (support vs billing vs KYC).
- Create or edit the role’s permissions.
- Assign the staff user.
- Have them refresh / re-login and confirm the sidebar.
Action catalog
| Action | When to use | Impact |
|---|---|---|
| Add / edit role permissions | New job function | Changes what every member of that role can click |
| Assign user to role | Onboarding | Grants the door + action keys |
| Remove permission or user from role | Offboarding or tightening | Immediate loss of those buttons after refresh |
If this fails
- “I can open the page but Ban is missing”: they have Trader manage but not Ban user manage / accounts manage — edit the role, do not use a superuser account.
- Removing a permission from a role affects everyone on that role.