Skip to main content
A role is a set of permissions in three areas: Objects, Settings, and Apps. This page lists every permission you can set when you create or edit a role in Settings › Role › Role. To create a role, see Manage roles.

Objects

“Actions you can perform on objects family.” For each object family, you check Read, Write, and Delete.

Project Access Level

The Project Access Level limits which projects a user can access, on top of the Project permissions:

Settings

“Manage general application-level actions.” Each settings zone has one Authorize checkbox. It controls access to the matching section of the settings menu.

Apps

Each app-level action has one Authorize checkbox.

Licence of a role

Qwoty calculates the licence of a role from its permissions:
  • core if the role can write projects,
  • support if the role can only read projects but can write other objects.
When you invite a user, the Role list only shows the roles that match the selected Licence. Each licence uses a seat of the matching type. See Subscription and seats.

System roles

The system roles admin, manager, view_only, and sale show a System badge and are read-only: “This role is a default system role and cannot be modified.” Open one with View to see its permissions.
You can’t create a custom role with the same permissions as view_only. Change at least one permission.

Manage roles

Create, edit, and delete roles.

Manage users

Assign a licence, a role, and teams to users.

Manage teams

Teams used by the Team access level.

API permissions

How the role of an API token applies to API calls.
Last modified on October 27, 2026