Knowldege Hub
Start typing to search…

Roles & Permissions

Define and manage roles in Zitcha to control which permissions users have across teams and resources. Define and manage roles in Zitcha to control which permissions users have across teams and resources.

Roles in Zitcha define what actions a user can take on your organisation’s resources. A role is a collection of permission sets, and each permission set allows specific actions. To make these permissions available, you assign roles to users within the scope of a team.

Role Types

Zitcha supports two types of roles:

System Roles

  • Predefined roles that exist when your organisation is created.
  • Include Basic, Power User, and Admin.
  • Maintained and updated by Zitcha automatically.

Custom Roles

  • Created by you to provide granular access.
  • Built from a user-specified list of permission sets.
  • Fully configurable to fit your organisation’s access needs.

Role Components

Each role has three components:

  • Name – a human-readable title for the role, used to identify it in Users configuration.
  • Description – a human-readable description of the role.
  • Permission Sets – the specific permissions included in the role.

Permissions use the format:

Examples:

  • plan.viewer lets a user view plans in their team scope.
  • wallet.editor lets a user manage wallets in their team scope.

System Roles

Zitcha’s predefined system roles give granular access to core resources. Permissions are updated automatically as new features are released. You can assign multiple roles to the same user across different teams.

Role summary:

RolePermissions
AdminAll editor permissions, plus sensitive actions like creating wallets and managing roles/permissions across the organisation.
Power UserAll viewer permissions, plus actions that modify state (e.g. creating or editing ad sets).
BasicRead-only actions, such as viewing existing resources (e.g. plans, data).

Predefined Permission Sets

Here are the main permission sets you can use in roles:

Permission SetPermissions
User Invitersupplier.invite, employee.invite, bulk.invite
User Manageruser.manager, supplier.invite, employee.invite, bulk.invite
Order Editororders.create, orders.view, orders.requestreview, orders.editpending, orders.editapproved
Order ManagerAll Order Editor permissions + orders.publish, orders.approve, orders.archive
Order Publisherorders.create, orders.publish, orders.approve, orders.view, orders.archive
Order Creatororders.create, orders.view, orders.editpending
Order Approverorders.view, orders.approve, orders.requestreview, orders.editapproved
Order Viewerorders.view
Order Analystorders.metrics.view
Channel Manager Facebookchannels.facebook.manage
Channel Manager Googlechannels.google.manage
Channel Manager Webchannels.web.manage
Activation Managerchannels.facebook.manage, channels.google.manage, channels.web.manage
Report Readerreports.view
Settings Managersettings.supplier.manage, settings.organisation.manage
Package Managerpackages.view, packages.create, packages.edit
Wallet Managerwallets.view, wallets.create, wallets.edit
Team Managerteams.create, teams.view, teams.edit, teams.delete
Role Managerroles.assigner, roles.edit, roles.create, roles.view
Plan Managerplans.create, plans.propose, plans.approve, plans.view, plans.archive, plans.edit, plans.metrics.view, adsets.approve
Plan Editorplans.view, plans.edit
Plan Creatorplans.create, plans.view, plans.edit
Plan Proposerplans.propose, plans.view
Plan Approverplans.view, plans.approve, plans.edit, adsets.approve
Plan Viewerplans.view
Plan Analystplans.metrics.view
Discounts Managerdiscounts.create, discounts.view, discounts.edit, discounts.delete

Creating Custom Roles

Before you begin: check if the role already exists.

  1. Go to Settings > Organisation > Roles.
  2. Click Create new role.
  3. Enter a Name and (optional) Description.
  4. From the Permission Sets list, click the pills to select the permissions you want included.
  5. Review the permissions.
  6. Click Create Role.
  7. Assign the custom role to users as needed.

Editing Custom Roles

  1. Go to Settings > Organisation > Roles.
  2. Click the pen icon next to the custom role you want to edit.
  3. Choose an action:
    • To edit the name or description, click into the field and update it.
    • To edit permissions, click Select Permission Sets and update the pills.
  4. Click Save Changes.

Deleting Custom Roles

Requirement: You cannot delete a role you are currently assigned to. Ask another administrator to remove you first.

  1. Go to Settings > Organisation > Roles.
  2. Click the pen icon next to the custom role.
  3. Click Delete Role.

Assigning Custom Roles

You can assign one or multiple roles to users. Roles always sit within the scope of a team.

Assign a Role to a User

  1. Go to Settings > Organisation > Users.
  2. Find the user in the list.
  3. Click the pen icon next to their name.
  4. Under Role, select from the available system or custom roles.
  5. Under Team, choose the team the role should apply to.
  6. Repeat for each role you want to assign.
  7. Click Save Changes.

Assign Roles and Users to a Team

  1. Go to Settings > Organisation > Teams.
  2. Create a new team or select an existing team.
  3. Click the pen icon next to the team.
  4. Under User, select the users to add.
  5. Under Role, select the roles you want applied to that team.
  6. Click Save Changes.

Summary

  • Roles are collections of permissions that define what a user can do.
  • System Roles (Admin, Power User, Basic) are predefined by Zitcha.
  • Custom Roles let you define access exactly as your organisation needs.
  • Roles must always be scoped to a team.
  • You can assign multiple roles to the same user for maximum flexibility.

Updated 2 months ago

What’s Next