Steps

  1. Open Staff → Roles & Permissions for the intended property using an administrator account. Complete the security verification required for a permission change.

  2. Choose a built-in role to review its policy, or Create role / Duplicate role for a custom role. Enter its name and description and select an empty or copied starting permission set.

  3. Review individual capabilities and use group-level grant/remove controls only for permissions the editor allows you to change. Required or protected permissions cannot be removed through the editor.

  4. Save the reviewed role or policy. If the property or policy version changed, reload and compare before saving again; changes must apply to the property you reviewed.

  5. To retire a custom role, choose Archive role, inspect the affected assignments and Confirm archive when permitted. Assign the intended replacement separately; archive does not silently rewrite a user’s account.

  6. Confirm the resulting policy and use the staff member’s property-role assignment control to apply the intended built-in or custom role. If an account loses access, use an authorized administrator rather than repeatedly retrying the forbidden operation.