Permission problems

Troubleshooting · Audience: tenant-admin · Permissions: role.admin

A user reports they can't do something they should be able to.

What this does

The real checklist for diagnosing a permission problem reported by a user.

Who can do this

An administrator investigating a report.

What happens next

Check in order:

1. Their role — does it actually include the permission needed, in Access > Roles?

2. Is the relevant app/module active for your workspace at all (Settings > Apps)?

3. Is there a narrower scope restriction — a department, team, or individual assignment they're not part of?

4. Is this actually an owner-only action (like editing roles) that no admin, regardless of permissions granted, can be given?

Important notes

• A small number of actions (editing roles/permissions, some platform-console actions) are hardcoded to specific roles and cannot be delegated via a custom role, no matter what permissions you grant.