Skip to main content

Roles and permissions

Plans and permissions:

  • Custom roles: Pro or Enterprise plan
  • Create, edit, duplicate, or delete roles: Admin role, or a custom role with Roles and permissions set to Can manage roles and permissions on the Configure tab
  • View roles and their permissions: Admin role, or a custom role with Roles and permissions set to Can manage roles and permissions or View roles and permissions only on the Configure tab
  • Assign a role to a person: Admin or Manager role, or a custom role with Manage team set to Create, edit, or delete any person or Create, edit, or delete certain people
  • Only members of the Admin role can change the Admin role’s permissions. The Admin role can’t be renamed or deleted, and it always keeps Can manage roles and permissions.
  • By default, Managers can assign only the Manager, Team Lead, Standard, and Basic roles.

Use roles to control what each person can see and do in Assembled, so everyone has the tools they need without access to settings or data they shouldn’t change. Every person has one role. A role is a set of permissions, such as whether someone can edit schedules, approve time off, view reports, or manage people.

To open it, go to Manage team > Roles and permissions.

Every company starts with five default roles. To give a group of people a different mix of permissions, create a custom role based on one of them.

Default roles

Role Typically used for
Admin Administrators who manage integrations and company-wide settings.
Manager Support managers who manage people, approve time off, edit schedules, and view reports.
Team Lead Leads who view and edit schedules for their team and use real-time monitoring.
Standard Team members who view schedules and submit requests, such as time off.
Basic Team members, including those at vendors, who only need to see their own schedule.

Whether someone is staffable is set on their profile, not by their role. Any role can be staffable, which gives that person a schedule on the Staffing timeline and an agent scorecard. See People management.

What the default roles can do

These are the default settings for the permissions people ask about most. Your company may have changed them. To see the full list, open a role in Manage team > Roles and permissions.

Permission Admin Manager Team Lead Standard Basic
View schedules Everyone’s Everyone’s Everyone’s Everyone’s Their own
Edit schedules Everyone’s Everyone’s Everyone’s No edit access No edit access
Publish schedules Yes Yes No No No
Schedule uploads, Restore schedules, Apply templates Yes Yes No No No
Time off requests Approve, deny, edit, and cancel all Approve, deny, edit, and cancel all Their own Their own Their own
Submit time off requests Yes Yes Yes Yes Yes
Schedule changes Approve and deny all Their own Their own Their own Their own
Real-time overview, Real-time agent analysis Yes Yes Yes Yes No
Team performance report Yes Yes No No No
Agent scorecard All scorecards All scorecards All scorecards Their own Their own
Manage team Any person Managers, Team Leads, Standard, and Basic users View all people View all people No access
Roles and permissions, Configure notifications, Configure third-party integrations Yes No No No No

For the AI agent and Copilot permissions, see AI agent permissions.

Everyone can change their own preferences, password, and connected apps in My settings. Changing their own name and email address there needs a role that can edit people with their role, such as Admin or Manager. See My settings.

How permissions are organized

When you open a role, its Feature permissions are grouped into tabs: Schedule, Forecast, Monitor, Report, Manage team, Configure, Data & integrations, Data, and Uploads. If your company uses AI agents or Copilot, there’s also an AI support tab. Some tabs are split into sections. For example, Schedule has Schedules, Time off, Voluntary time, Requests, and Templates. To find a permission by name, use the search box at the top of Feature permissions.

Most permissions are a choice between options, from full access to no access. A few work together:

  • View schedules sets whose schedules someone sees: Can view all agents’ schedules, Can view only their own schedule, or No schedule viewing access.
  • Edit schedules sets whose schedules they can change, and whether changes apply right away or go for approval: Can edit all agents’ schedules, Can edit only their own schedule, Can request changes (for All agents’ schedules or Their own schedule), Can edit schedules with custom permissions, Can edit own schedule with custom permissions, or No edit access.
  • With either custom permissions option, you choose for each event type whether the role Can edit, Can request changes, or Has no edit access. Use this to let a role edit breaks and lunches, for example, but only request changes to time off.
  • Publish schedules lets a role publish test schedules to the primary schedule, and create and edit recurring events. See Permission errors and missing access.

Create a custom role

A custom role starts from one of the default roles, called its base role. Some permissions depend on the base role and can’t be changed, so choose the default role closest to what you need. To start from another custom role instead, duplicate it.

  1. Go to Manage team > Roles and permissions.
  2. Select Add custom role.
  3. Choose a base role, then select Next.
  4. Enter a Name and, optionally, a Description, then select Create role.
  5. The new role opens with the base role’s permissions. Change the permissions you need.
  6. Select Save changes. You can also press Cmd + S on a Mac or Ctrl + S on Windows.

The role appears in Roles and permissions, and you can assign it to people. People who already have a role see permission changes after a few moments, or after they refresh the page.

Duplicate a role

  1. Go to Manage team > Roles and permissions.
  2. In the role’s row menu, select Duplicate.
  3. Enter a Name and, optionally, a Description, then select Duplicate.

The copy has the same permissions and base role as the original.

Assign a role to a person

  1. Go to Manage team > People management.
  2. Select the person’s name to open Edit person.
  3. In Role, choose the role.
  4. Select Save changes.

Roles you aren’t allowed to assign don’t appear in Role. For more ways to set roles, including CSV upload, see People management.

Restrict report data by team or queue

You can limit a role’s reports to data for the teams or queues in each person’s own profile. This applies only to reports, not to the Staffing timeline or other pages.

  1. Go to Manage team > Roles and permissions and open the role.
  2. Select the Report tab, then All reports.
  3. Under Data access filter restrictions for all reports, choose Restrict reports data access.
  4. Turn on Restrict access by queues, Restrict access by teams, or both.
  5. Select Save changes.

People with the role can then filter reports only by the queues or teams in their profile. To limit what people see by site across Assembled, use Restricted sites.

Edit or delete a role

To change a role’s permissions:

  1. Go to Manage team > Roles and permissions and select the role, or select Edit in its row menu.
  2. Change the permissions you need. Undo and Redo are next to Save changes.
  3. Select Save changes.

If you leave without saving, Assembled asks you first. To leave without changes, select Cancel.

To rename a role or change its description, select Edit overview, make your changes, then select Save.

To delete a role:

Important: Everyone with the role must move to another role first. Check that the role you move them to has the access they need.

  1. Open the role, then select Delete.
  2. If nobody has the role, select Delete role.
  3. If people have the role, select Reassign people to new role, choose the role to move them to, select Next: delete role, and then select Reassign people and delete role.

You can also select Delete in the role’s row menu on Roles and permissions.

Still have questions?