Nova Find the right page for roles and permissions
Which Team & Access page to open to give someone a role, change what a role allows, make a one-person exception, or find out why someone is blocked.
In the sidebar, open Administration. Every page about who can do what is listed under Team & Access. The short address /settings/org/rbac opens Roles & Permissions at /settings/org/rbac/roles.
Access in Nova works in layers. A person has one or more roles, each role is a set of permissions, and an override can add or block a single permission for one person. Each layer has its own page.
Steps
Follow this order when you set up a new team, or jump to the step you need.
- Read what each built-in role is for in Choose the right built-in role for a team member. Most teams need nothing else.
- To change what a role allows, or make a new role, choose Roles & Permissions. See Create a role and choose its permissions.
- To add a person or change their roles, choose Team & Roles. The page heading reads Organization Users. See Add a team member and Change or remove a team member's access.
- When one person needs a permission their role does not give, or must not have one it does, choose User Overrides. You can also press Advanced overrides in that person's Edit roles panel on Team & Roles. See Give one person a permission their role does not have.
- When someone says a button is missing or a page refuses them, choose Access Checker and press Check access. It names the roles and overrides that decide the answer. See Check why someone can or cannot do something.
- For sign-in rules such as two-step verification, choose Security Policies. See Require two-factor authentication for your team.
What you see
- On the Administration page, Team & Roles and Roles & Permissions come first under Team & Access. User Overrides and Access Checker are listed after the everyday pages because most organizations rarely need them.
- A page you are not allowed to open is left off the list.
If something looks different
- The short address shows a page saying you do not have access: it always opens Roles & Permissions, which needs permission to read roles. If your role can only manage overrides or check access, choose User Overrides or Access Checker from Administration instead.
- A change to a role does not seem to apply to one person: they may have an override. Run Access Checker for that person and permission.