Where: Settings → Team & security → Roles
Open this page: admin.<your-site>/settings/team/roles (replace <your-site> with your site address)
Before you start
- Only the site owner can make or change custom roles.
- Look at the built-in roles first. See Roles explained.
Steps
- Open Settings → Team & security → Roles (also reachable from your Team page).
- Press New role.
- Type the Role name, for example Video editor. Add a note about what it is for, if you like.
- Tick what people with this role can do. Everything else stays off.
- Read What the role can and can't do. The Can't list shows what is left out, such as publishing or changing the team.
- Press Create role. You may be asked to sign in again for your security.
- To give it to someone, open the person on your Team page and choose a Custom role.
Good to know
- Owner-only powers never go into a custom role. They include changing site settings, AI settings, billing, the team and roles.
- If a new role can do less than before, that person is signed out on all devices.
- Built-in roles can't be changed, but you can open one to see what it can do.
- You can ask the AI for a role. It waits in the list as Waiting for you until you read it and press Turn on.
- Deleting a role asks which role its members should get instead.
- The page shows how many custom roles you have used.
Common problems
- "Only an owner can make or change custom roles." Ask the owner.
- A role change is waiting for you. Check it and press Turn on, or Discard change.
- A helper still can't do something. Open the role and tick that permission. Some things never go in a custom role.
Questions
Frequently asked questions
Can a helper write but not publish?
Yes. Tick the writing permissions and leave out Publish or schedule stories. The built-in Reporter role also works this way.
What is the difference between a role and a review rule?
A role says what a person can do. A review rule says whose stories get checked first. See Review rules.
Can a custom role change billing?
No. Billing, the team and settings are owner-only.
Will people lose access if I change a role?
They get the new permissions at once. If the role can do less than before, they are signed out on all devices and sign in again.