> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.fynapse.app/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.fynapse.app/_mcp/server.

# Roles

## Overview

The **Roles** screen allows you to add roles to Fynapse so that they can be assigned to Fynapse users upon their creation. The screen also allows to edit, clone, and delete selected roles.

## Definition of Role

A role is a set of permissions that allows users having it to perform defined actions (from just viewing the screens to editing their contents) in particular Fynapse modules.

## Default System Roles

By default, the following roles are provided with Fynapse:

* Viewer
* Editor
* Bulk Operator
* Bulk Uploader
* Operator
* Fynapse System Administrator
* Fynapse Security Administrator
* Fynapse REST API Client
* Workflow Administrator
* Workflow Approver

To learn more, refer to the [Default System Roles](/documentation/instance-management/security/default-system-roles/overview) chapter.

Keep also in mind following information:

* Below roles allow for changing the Fynapse configuration. These roles should be assigned with caution. It is not recommended to give them to regular users:
  * Fynapse System Administrator
  * Fynapse Security Administrator
  * Bulk Operator
  * Bulk Uploader
* The Editor role allows for changing business-related data, executing actions, etc. For example, changing subledger configuration, calendars, triggering balances etc.
* The Operator role should be used for the maintenance teams

## Roles Screen

The **Roles** screen comprises the following elements:

* The **Refresh** button - click it to update information about roles
* The grid - use it to see a list of all added roles. The grid has the following columns:
  * **Type** - displays information if a role was predefined and comes with Fynapse (system role) or if the role was created by a user (custom role).
  * **Name** - a unique name of a role
  * **Description** - additional information about the role
  * **Groups** - names of groups to which the role is assigned
  * **Updated on** - a date when the last changes to the role were saved

Additionally, you can:

* Sort columns ascending or descending, and set their visibility by clicking the three dot icon next to the names of columns
* Filter content within some columns to find particular information

In addition, at the bottom of the screen, you can:

* See a number of pages that display roles and buttons to navigate between pages
* See information which page you are currently viewing and how many pages are available in total
* Decide how many roles you want to display on one page
* See how many roles are presented on the page

## Roles Details Screen

This screen is displayed if you click the chevron in the **Details** column. The screen comprises the following elements:

* The action buttons:
  * The **Edit** button - click it to edit a selected role.
    > **Info**
    >
    > Keep in mind that system roles cannot be edited.
  * The **Clone** button - click it to clone the selected role
  * The **Delete** button - click it to delete the selected role.
    > **Info**
    >
    > Keep in mind that system roles cannot be deleted.
* **Details** - contains information about the name of the role and its description
* **History** - contains information about who and when created and updated the role
* **Permissions** - lists all permissions assigned to the role. Permissions are divided into categories for easier management. In an edition mode, hover over a name next to a checkbox to determine what a particular permission grants.
* **Groups** - contains information to which groups this role is assigned. You can click the name of the group to see its details.

## Tutorials

#### How to Add a Role?

1. Go to **Security > Roles**.
2. Click the **Add** button.
3. Provide basic information about a role:
   1. Into the **Name** field, type a unique name for the role.
   2. Into the **Description** field, type an optional description.
4. In the **Permissions** panel, decide which permissions you want to add to the role by selecting proper checkboxes next to permissions.
5. In the **Groups** panel, select checkboxes next to the groups the role should be assigned.
6. Click the **Save** button to save the role or the **Cancel** button to discard your changes. The new role will appear in the **Roles** grid.

#### How to Edit a Role?

> **Tip**
>
> Only custom roles can be fully edited. System roles can be partially edited; only the group assignment can be amended.

1. Go to **Security > Roles**.
2. In the grid, find a role you want to edit and in the **Details** column, click the chevron.
3. Click the **Edit** button.
4. Introduce necessary changes.
5. Click the **Save** button to save the role or the **Cancel** button to discard your changes.

#### How to Clone a Role?

1. Go to **Security > Roles**.
2. In the grid, find a role you want to clone and in the **Details** column, click the chevron.
3. Click the **Clone** button.
4. Introduce necessary changes.
5. Click the **Save** button to save the role or the **Cancel** button to discard your changes.

#### How to Delete a Role?

> **Tip**
>
> Only custom roles can be deleted.

1. Go to **Security > Roles**.
2. In the grid, find a role you want to delete and in the **Details** column, click the chevron.
3. Click the **Delete** button.
4. Confirm your action. The role will be deleted.

## Learn More

* [Groups](/documentation/instance-management/security/security-management/groups)
* [Users](/documentation/instance-management/security/security-management/users)
* [Data Permissions](/documentation/instance-management/security/security-management/data-permissions/data-permissions-overview)
* [Default System Roles Overview](/documentation/instance-management/security/security-management/data-permissions/data-permissions-overview)
* [Security Best Practices](/documentation/instance-management/security/security-management/security-best-practices)