Managing Roles

Forjinn provides a dedicated Roles page that allows administrators to create, edit, and manage user roles with fine-grained permissions. This is the central hub for Role-Based Access Control (RBAC) within the platform.

Accessing the Roles Page

1. From the left-hand sidebar, navigate to Admin.
2. Click on Roles to open the role management page.

Understanding Roles

A role is a named collection of permissions that controls what actions a user can perform within Forjinn. Instead of assigning permissions individually to each user, you assign users to roles. A user can have multiple roles, and their effective permissions are the combined union of all assigned roles.

Default Roles

Forjinn ships with the following default roles:

• Admin: Full access to all platform features, including user and role management, billing, and all development tools.
• Editor: Can create, edit, and deploy chatflows, agents, and tools. Cannot manage users or platform settings.
• Viewer: Read-only access to chatflows, agents, and execution logs. Cannot create or modify resources.

Creating a New Role

1. On the Roles page, click Create Role or Add New Role.
2. Fill in the role details:
   • Name: A clear, descriptive name (e.g., "Chatflow Publisher," "API Developer").
   • Description: A brief explanation of the role's purpose and intended use.
   • Permissions: Select the specific permission keys this role should have from the available list (see Permissions for the full reference).
3. Click Save or Create Role to add the new role to the system.

Editing an Existing Role

1. From the Roles page, locate the role you want to modify.
2. Click the Edit button or icon for that role.
3. Update the name, description, or permission selections as needed.
4. Click Save or Update to apply the changes. Changes take effect immediately for all users assigned to this role.

Deleting a Role

1. From the Roles page, locate the role you want to delete.
2. Click the Delete button or icon.
3. Confirm the deletion when prompted.

Important: Before deleting a role, ensure that no active users rely exclusively on it for access. Deleting a role removes its permissions from all assigned users, which may result in lost access. Reassign users to another role first if needed.

Assigning Roles to Users

Roles are assigned to users through the Managing Users page. A user can be assigned multiple roles, and their effective permissions are the cumulative union of all assigned roles.

Best Practices

• Principle of Least Privilege: Only grant the permissions necessary for a user's job function. Avoid broadly assigning the Admin role.
• Use Descriptive Names: Role names should clearly indicate their purpose (e.g., "Flow Builder," "Log Viewer").
• Audit Regularly: Periodically review roles and their assigned permissions to ensure they remain appropriate.
• Document Custom Roles: Maintain internal documentation for any custom roles your organization creates, so new admin team members understand the access model.