Users & Roles settings allow you to manage your team members, create custom roles, and assign granular permissions to control access across MSPortal.ai.Documentation Index
Fetch the complete documentation index at: https://docs.msportal.ai/llms.txt
Use this file to discover all available pages before exploring further.
Accessing Users & Roles
- Click Settings in the sidebar
- Select the Users & Roles icon from the settings navigation
Users Tab
The Users tab displays all team members in your organization.
User Information
Each user entry shows:| Field | Description |
|---|---|
| Name | User’s full name |
| Login email address | |
| Role | Assigned custom role |
| Status | Active or inactive |
| Last Login | Most recent login timestamp |
Adding a New User
Assign Companies
If “Restrict to Assigned Companies” is enabled, select which companies this user can access
Editing Users
Click on any user row to edit their details:- Update profile information
- Change assigned role
- Modify company assignments
- Deactivate or reactivate the account
Roles Tab
The Roles tab allows you to create and manage custom roles with specific permissions.
Understanding Roles
Roles define what actions users can perform in MSPortal.ai. Each role is a collection of permissions that can be assigned to users.The Primary Admin role is a system role that cannot be deleted or modified. It always has full access to all features.
Creating a Custom Role
Duplicating a Role
When an existing role is close to what you need, you can duplicate it as a starting point instead of rebuilding from scratch.Open the Row Actions
On the role you want to copy, click the actions menu (three dots) at the end of the row.
Click Duplicate
Select Duplicate. A new role is created immediately, named Copy of [original role name].
Duplicating a role copies the role name, description, all permission assignments, and role configuration flags such as bypass-company-restrictions and update-email opt-in. Company roles also carry over their ticket display group. It does not copy user assignments, so no users receive the new role until you assign it explicitly.
RBAC Permissions
Roles use a granular Role-Based Access Control (RBAC) system. Each role has three permission levels for every resource:
| Permission Level | Description |
|---|---|
| Read | View data and access the page |
| Write | Create and edit records |
| Manage | Full control including delete and settings |
Permission Sections
Permissions are organized into three sections: Main Navigation - Access to core application pages:- Dashboard, Surveys, Goals, Planner, Budgets
- Calendar, Meetings, Notifications
- M365, Tickets, Compliance, Training
- Devices, Reporting, External
- Users, Roles, Companies
- Training, Tickets, Compliance settings
- Templates, Playbooks, Integrations
- Import/Export, Tenant, Billing
- Impersonate (start user impersonation)
- Types management
Role Options
| Option | Description |
|---|---|
| Default Role | Automatically assign to new users |
| Bypass Company Restrictions | Access all companies regardless of tenant restrictions |
Example Role Configurations
| Role Name | Typical Permissions |
|---|---|
| Support Tech | Read/Write on Tickets, Devices; Read on Company Overview |
| Account Manager | Manage on Calendar, Budgets; Read/Write on Reports |
| Compliance Admin | Manage on Compliance, Playbooks; Read on Reports |
| Training Admin | Manage on Training; Read on Company Overview |
Company Assignments
When “Restrict to Assigned Companies” is enabled in Tenant Settings, users only see data for companies they’re assigned to.Assigning Companies to Users
- Edit a user from the Users tab
- Navigate to the Company Assignments section
- Select the companies this user should have access to
- Save changes
Best Practices
Role Design
- Start simple - Create a few broad roles before adding specialized ones
- Use descriptive names - Role names should indicate the user’s function
- Document permissions - Maintain a reference of what each role can do
User Management
- Regular audits - Review user access periodically
- Deactivate vs delete - Deactivate users who leave to preserve audit trails
- Least privilege - Assign the minimum permissions needed for each role
Troubleshooting
User Can’t Access a Feature
- Check the user’s assigned role
- Verify the role has the required permission
- If using company restrictions, ensure the user is assigned to relevant companies
Role Changes Not Taking Effect
- Ask the user to log out and back in
- Clear browser cache if issues persist
- Verify the role was saved successfully
Related Resources
- Settings Overview - All settings options
- Tenant Settings - Company restriction settings
- Getting Started - Role creation guide