Change a user's role

How-to guide Who can do this: Platform Operator, Tenant Owner, Tenant Admin, Merchant Owner, Merchant Admin

Open the user, click Edit, choose another Role and save. The user's access changes on their next click, without signing out, and the audit log records the old and the new role.

Before you start#

• Who can do it: Tenant Owner, Tenant Admin, Merchant Owner, Merchant Admin and the Platform Operator (with a platform staff account) — the roles that may edit users. A Tenant Supervisor sees users but no Edit; the other roles do not see Users at all.
• Whose role: you can change the role of users in your own organisation only. A user of another organisation does not open for you; see Which records each user can see.
• Pick the right role first. What each role is for is on Roles and permission groups, and what it allows, feature by feature, is on What each role can do.
• Drivers do not get a role. A driver's access in the Driver App comes from the driver record, not from a role. Leave Role empty for a driver's login. To give a driver an app login, see Give a driver a Driver App login.

Steps#

1. Open Users in the sidebar and click the user's number or email.
2. On the user's page, click Edit.
3. In the Role & Permissions card, choose the new role in Role. The list shows the four roles of your own kind of organisation: tenant roles for tenant staff, merchant roles for merchant staff. To take every role away, choose - at the top of the list.
4. Leave Password and Confirm password blank, so the password stays as it is.
5. Click Save. You return to the user's page with "User updated successfully.", and the page shows the new role.

What happens next#

• The new access applies on the user's next click. The user does not need to sign out and back in; what they could open a moment ago may now be refused, and the other way round.
• The old role is gone. A user holds at most one role, so saving replaces the previous role with the new one.
• The change is recorded. The audit entry for the save shows the role before and after, even when the role was the only thing you changed. Only the role names are recorded, never the list of permissions behind them. What the audit log holds is on Audit log.
• The user is not notified. No notification is sent for a role change; tell them yourself what changed.

Rules and limits#

• The list follows your organisation type. Tenant staff see the tenant roles and merchant staff the merchant roles; platform staff see all nine roles.
• No role means no portal permissions. A user saved with no role can still sign in but can open nothing that needs a permission.
• Your own role works the same way. If you change your own role, your own access changes on your next click. Give yourself a role that cannot edit users, or remove your own role, and you lose access to this page at once.
• The organisation does not change. Changing the role never moves the user to another tenant or merchant.

If something goes wrong#

Related#

• Roles and permission groups
• What each role can do
• Audit log
• Create a user