Create custom instance roles

Custom instance roles let you grant users specific instance-level capabilities without giving them full Admin access. Unlike built-in roles (Owner, Admin, Member), custom instance roles let you define granular permissions for instance settings, user management, and other instance-wide management.

Create a custom instance role

Instance owners and instance admins can create custom instance roles.

To create a custom instance role:

1. Go to Settings > Roles > Instance roles.
2. Select Create role.
3. Enter a role name and optional description.
4. Optionally, select a Preset (Admin, Member) to pre-fill permissions based on a built-in role, then adjust as needed.
5. Select the permissions for this role:

• Instance settings > Manage: View and change instance-wide settings
• Members > Manage: Invite, remove, and update users across the instance
• Roles > Manage project roles: Create, edit, and delete custom project roles only
• Roles > Manage all roles: Create, edit, and delete all custom roles (instance and project). Selecting this automatically includes Manage project roles.
• API keys > Manage own: Create and delete the user's own API keys
• API keys > Manage others: View and delete other users' API keys. Automatically includes Manage own.
• Tags > View: View all tags
• Tags > Manage: Create, edit, and delete tags
• Projects > Create: Create new projects
• Insights > View: View instance-level insights

1. Select Save.

Assign a custom instance role to users

Users with the Roles: Manage all roles permission can assign custom instance roles.

To assign a custom instance role:

1. Go to Settings > Users.
2. Find the user you want to update.
3. Select the user's current role to open the role dropdown.
4. Under Custom roles, select the role you want to assign.

Edit a custom instance role

To update an existing custom instance role:

1. Go to Settings > Roles > Instance roles.
2. Find the custom role you want to edit.
3. Select the three-dot menu > Edit.
4. Update the role name, description, or permissions.
5. Select Save changes.

Duplicate a custom instance role

To create a new role based on an existing one:

1. Go to Settings > Roles > Instance roles.
2. Find the role you want to duplicate.
3. Select the three-dot menu > Duplicate.
4. Update the role name and permissions as needed.
5. Select Create role.

Delete a custom instance role

To delete a custom instance role:

1. Go to Settings > Roles > Instance roles.
2. Find the role you want to delete.
3. Select the three-dot menu > Delete.
4. Confirm the deletion.

Permissions reference

The table below describes each permission group and its checkboxes as they appear in the Instance roles editor.