Define Roles and Permissions

You need to define roles and define access permissions to ensure that users have access to the required objects and privileges to take the required action. 

The Roles & Permissions menu allows you to define roles for your program.

You can configure two types of roles.

Local Roles

Local roles are roles that are valid only in the program. These roles are available for use in all projects within the program but are not valid outside the program. You can change the permissions on these roles to fit your site's requirements.

Amplify provides 4 local inbuilt roles for all programs. These are local to the program they are in and are not available for use anywhere else

Shared Roles

These are roles that are available at a global level and can be made available across all programs. The shared roles are defined using the global administration function. Learn more about global roles configuration here.

This article covers:

• Creating local roles
• Configuring shared roles
• Role Permissions
• Deleting Roles

Create Local Roles

To create a local role:

1. Navigate to the Teams menu in your program.

2. Select Roles & Permissions.

3. Click on the New Role button.
   This will display the New Role form.
   

4. Give the role a name.
5. Set permissions as required. See Role Permissions for more information.
6. Click on the Save button.
   You have now created a custom role for your program. This role will be available for use in the program teams as well as in all projects in the program.

Configure Shared Roles

Shared roles are globally defined roles that are available across all programs and projects. Learn about global role definitions here. You can add shared roles to your program.

To add a shared role:

1. Navigate to the Teams & Roles tab in your program under Configuration.

2. Select Roles & Permissions. 
3. In the Shared Roles section, choose a role from the drop-down list.
4. Click on the Add Role button.
   You have now added the selected global role in your program. This role will be available for use in the program teams as well as in all projects.

Role Permissions

Role Permissions provide specific permissions to allow users to create, view, modify and/or delete records within Amplify.  

The Role Edit page displays a list of capabilities available for different objects in your program. The options 'Read' or 'Update' allows you to grant read or edit permissions towards each capability. The 'Full' option will provide full write permissions to the role. If you want to prevent access to a certain area of an initiative, select 'None'.

Delete Roles

You can delete a role only if it is not assigned to a team member.  Program administrator roles can be deleted only if there are more than one in the team.

To delete a role:

1. Navigate to the Teams & Roles tab in your program Configuration.

2. Select Roles & Permissions. 
3. Locate the role and click on the Edit "pen" icon.
4. Scroll down to the end of the permissions list in the Edit Role form.
5. Click on the Delete button.

See also

The Program Administrator Role