Under «Settings» → «Security» you see all the roles in your workspace and which permissions each role carries. As an administrator you have a read-only view here: you can look at the roles and their permissions. Roles are created, changed and deleted by amaise — on request through Customer Success, who approve every change first. What you can set yourself here is the upload dossier per role (see below).
The roles overview
The table lists each role with:
a status — «Standard» for a role shipped by amaise, «Adjusted» for a modified standard role, «Custom» for a role that belongs to the workspace itself,
the number of permissions the role includes,
the number of users who hold the role.
Viewing a role's permissions
Using the eye icon you open a role and see its permission catalog, grouped by category. That way you can check exactly what a role is allowed to do before you assign it to someone.
Note: Because you can only view the roles, the fields are read-only. If you want to adjust a role or create a new one, contact Customer Success. Name the workspace, the role and which permissions should be added or removed. Customer Success approves the change, then amaise makes it.
You manage which role a person holds in user management (see Settings: Manage users). The fundamental roles and what they mean are also explained in the Security FAQ on roles and permissions.
Following changes to a role
Every change to a role is recorded in your workspace's audit log. Search there for id: followed by the role's key, for example id:tenant:claims-lead for a «Custom» role. You then see who created, changed or deleted the role and when, and which permissions were added or removed. For a «Custom» role you also see what its title, description and icon were before and after; a standard role's title, description and icon are amaise's, so for a standard role only the permission changes are recorded. The «Last 2 years» filter reaches back the furthest (see Audit log: Track access).
Upload dossier per role
Directly below the roles overview you set which dossier a role's uploads land in. Unlike the roles themselves, you change this setting yourself as a workspace admin (permission «TENANT__U_CONFIG»). The list shows the roles that may upload files — standard roles and custom roles.
For each role you choose:
«No default (amaise assigns)» — amaise assigns uploaded files to a dossier itself. Every role is set up this way until you change it.
A dossier as the default — this dossier is preselected when uploading; whoever uploads can pick a different one.
A dossier with «Fixed dossier» switched on — the role's uploads always land in this dossier. When uploading, the «Dossier» field is read-only and shows this dossier, with the note «Set for your role – can't be changed». You can only turn the switch on once a dossier is selected.
Uploaded files can still be moved to a different dossier afterwards. The setting applies to uploads in amaise; files that arrive through an integration are not affected.
If an entry's role or dossier no longer exists, amaise marks the entry with a warning. An entry whose role no longer exists has no effect. If the dossier no longer exists, it depends on the switch: with «Fixed dossier», amaise refuses the role's uploads and asks the person uploading to contact their workspace admin; without it, whoever uploads simply picks the dossier. Remove the entry or pick a different dossier.
Switching role temporarily
From the avatar menu in the top right, under «Switch role», you can temporarily take on a lower role and see amaise the way that role sees it. This helps with testing and support — for example, to understand what a Basic user sees in a case. You can return to your own role at any time.
While you are switched, you see everything that role can see — switching from «Technical admin» to «Basic user», for example, includes case contents and documents. On a production workspace that is real case data, so switch with care. If a production workspace should not allow it at all, amaise can remove the role switch from «Technical admin» on request through Customer Success.