Creating custom roles

Custom roles let you define exactly what each teammate can see and do in G8KEPR by toggling individual permissions in a matrix, instead of relying on the built-in roles. This is useful when a person needs more access than a Viewer but less than an Admin.

Before you start

• ▸You need the Manage team permission (Owners and Admins have it by default).
• ▸Custom roles apply only within your own organization. Members, sensors, and keys are always isolated to your org.

Create a role

1. 1.Open Settings → Team → Roles from the dashboard.
2. 2.Click New role.
3. 3.Give the role a clear name (for example, Security Analyst) and an optional description so teammates understand its intent.
4. 4.Set the permission matrix (below), then click Save role.

Set the permission matrix

Permissions are organized as a grid. Each row is a resource area and each column is an action:

• ▸Resources — Sensors, Threats & Detections, API Keys, Team, Billing, and Settings.
• ▸Actions — View, Create, Edit, and Delete.

Enable a cell to grant that action on that resource. For example, a read-only analyst might get View across Sensors and Threats & Detections, with everything else left off.

A minimal analyst role looks like this:

{
  "name": "Security Analyst",
  "permissions": {
    "sensors": ["view"],
    "threats": ["view"],
    "api_keys": [],
    "team": [],
    "billing": [],
    "settings": []
  }
}

Assign the role

1. 1.Go to Settings → Team → Members.
2. 2.Select a member and choose your new role from their role dropdown.
3. 3.Save. The change takes effect shortly after you save.

Edit or remove a role

• ▸Reopen the role from Settings → Team → Roles to adjust its matrix. Updates apply to everyone assigned to it.
• ▸You cannot delete a role while members are still assigned to it — reassign those members first.

Related

• ▸Inviting teammates
• ▸Managing API keys