1. Global roleWorkspace settings: billing, users, security, integrations, AI.
  2. App roleInside one app: which records, which actions, sensitive fields.
  3. DefaultsOwner, Admin, Maintainer, Member, Viewer. Edit them, reset any time.
  4. Custom rolesAdd any role. Delete it once nobody uses it.
  5. CompaniesStart from these and can customise for themselves.
Global roles App roles Compare
ESC
↑↓navigate↵open⌘Btoggle sidebar

New custom role

Give it a name and pick a role to start from. You can change every permission after.