跳到主要内容

Custom Role Configuration

Custom roles allow you to flexibly define role names and permissions based on your team's actual needs, without being restricted by system roles.


Where to Create Custom Roles

LevelCan CreateDescription
Enterprise✅ YesConfigurable enterprise permission points + organization/project permission points
Organization✅ YesConfigurable organization permission points + project permission points
Project❌ NoCannot be created, but can override the permission matrix of inherited roles

The name of a custom role cannot conflict with system roles (Administrator, Maintainer, Developer, Participant, Viewer).


Creating Custom Roles

Creating at the Enterprise Level

  1. Go to Enterprise Settings → "Roles and Permissions"
  2. Click "Add Role", enter the role name and description
  3. Configure permission points:
    • Enterprise Permission Points — Operation permissions of the role members within the enterprise
    • Organization/Project Permission Points — Operation permissions of the role members after they are delegated to an organization or project
  4. Click "Save" to complete the creation

Creating at the Organization Level

  1. Go to Organization Settings → "Roles and Permissions"
  2. Click "Add Role", enter the role name and description
  3. Configure permission points:
    • Organization Permission Points — Operation permissions of the role members within the organization
    • Project Permission Points — Operation permissions of the role members after they are delegated to a project
  4. Click "Save" to complete the creation

Limitations

  • Each enterprise and organization can create a maximum of 50 custom roles
  • Role names must be unique and cannot conflict with system role names

Overriding Permission Matrix at the Project Level

After enabling permission delegation, custom roles created at the enterprise or organization level will appear in the project's role list.

Project administrators can locally override the permission matrix of these roles:

  1. Go to Project Settings → "Roles and Permissions"
  2. Find the custom role that needs to be overridden
  3. Click "Edit Permissions", adjust the permission points of this role within the current project
  4. After saving, the modified permissions will only take effect within this project

This provides some flexibility at the project level: it avoids creating a large number of fine-grained roles at the upper level, while still allowing differentiated adjustments for specific projects when necessary.