How do I manage user roles and permissions?

Role and permission management allows you to precisely control the access granted to your users based on their responsibilities. This feature helps you strengthen security, limit user errors, and structure the administration of your Secure Exchanges environment.

Understanding how it works

The principle is as follows: you create a role group, assign permissions to it, and then add users to it. Each person placed in the group automatically inherits all of its permissions.

This approach avoids having to configure access on a person-by-person basis. When an employee changes roles, they simply need to be moved from one group to another.

Note: the configuration must be done in this precise order. Create the group, configure its permissions, and only then add users to it. A user added to a group without permissions will not gain any additional access.

Prerequisites

• You must be an administrator of the account to access this section.

• Take a moment to list the functions present in your organization before creating your groups. A well-thought-out breakdown from the start prevents having to redo everything later.

Step 1: Access role and permissions management

1. Log in to the Secure Exchanges online portal. If you need help, see Log in to the Secure Exchanges online portal.

2. In the left-hand menu, under the Organization section, click on Roles & permissions.

Step 2: Create a role group

3. Click on Add a new group role.

4. Give the group a clear and representative name that reflects the function it represents, for example, IT Administrators, Support Technicians, or Billing. Avoid generic names like "Group 1" or "Testing," which become difficult to interpret over time.

5. Save.

The group has now been created, but no permissions have been assigned to it yet. Therefore, it does not grant any access at this time.

Step 3: Configure group permissions

To assign permissions to a group, you must first switch to edit mode.

6. Locate the relevant group in the table.

7. Click on the Edit button, located at the bottom right of the group's profile.

8. Activate the switches corresponding to the permissions you wish to grant.

9. Click on Save.

A counter displayed in the upper right corner of the card, for example 0/9, indicates the number of permissions activated out of the total available. It allows you to check the scope of access for a group at a glance.

Note: apply the principle of least privilege. Only enable the permissions strictly necessary to perform the role. It's always easier to add a missing permission than to discover afterward that overly broad access has caused an unintended consequence.