Custom Role Configuration
Custom roles allow you to flexibly define role names and permissions based on your team's actual needs, without being restricted by system roles.
Where to Create Custom Roles
| Level | Can Create | Description |
|---|---|---|
| Enterprise | ✅ Yes | Configurable enterprise permission points + organization/project permission points |
| Organization | ✅ Yes | Configurable organization permission points + project permission points |
| Project | ❌ No | Cannot be created, but can override the permission matrix of inherited roles |
The name of a custom role cannot conflict with system roles (Administrator, Maintainer, Developer, Participant, Viewer).
Creating Custom Roles
Creating at the Enterprise Level
- Go to Enterprise Settings → "Roles and Permissions"
- Click "Add Role", enter the role name and description
- Configure permission points:
- Enterprise Permission Points — Operation permissions of the role members within the enterprise
- Organization/Project Permission Points — Operation permissions of the role members after they are delegated to an organization or project
- Click "Save" to complete the creation
Creating at the Organization Level
- Go to Organization Settings → "Roles and Permissions"
- Click "Add Role", enter the role name and description
- Configure permission points:
- Organization Permission Points — Operation permissions of the role members within the organization
- Project Permission Points — Operation permissions of the role members after they are delegated to a project
- Click "Save" to complete the creation
Limitations
- Each enterprise and organization can create a maximum of 50 custom roles
- Role names must be unique and cannot conflict with system role names
Overriding Permission Matrix at the Project Level
After enabling permission delegation, custom roles created at the enterprise or organization level will appear in the project's role list.
Project administrators can locally override the permission matrix of these roles:
- Go to Project Settings → "Roles and Permissions"
- Find the custom role that needs to be overridden
- Click "Edit Permissions", adjust the permission points of this role within the current project
- After saving, the modified permissions will only take effect within this project
This provides some flexibility at the project level: it avoids creating a large number of fine-grained roles at the upper level, while still allowing differentiated adjustments for specific projects when necessary.