INSIDE 3.3
ADM-008

Roles and permissions

Assign operator roles and delegated permissions, and understand how they affect screens, actions and API access.

adminsupervisordeveloper
DraftThis article hasn't been reviewed yet.
Where to find it
Settings › Account › Operators › RolesSettings › Account › Operators

What it is

Roles determine which INSIDE functions an operator can use. Some roles have a permissions panel for finer control over screens or actions. INSIDE also checks roles when an authenticated operator calls a protected API action, alongside any website or action-specific permissions.

Who uses it and why

Operators use the screens and actions allowed by their account. Supervisors with Manager use delegated permissions to manage operators and their workload.

Settings is the client's top administrative role. Users with Settings or Manager and the required operator permissions review or change access within their authority. Developers use these assignments to understand why an integration can sign in but still receive an access-denied response.

Where to find it

With Settings or Manager and the required operator permissions, open Settings › Account › Operators, edit the operator and select Roles. Use the settings icon beside an enabled role to open its permissions panel, such as Manager Permissions or Settings Permissions.

Developer is a separate role control on the operator's General tab, shown when your account has Developer. API authorisation happens when an action is called; there is no separate client screen listing a universal API access policy.

How it works

For operators, roles such as Chat, Reports and the channel-specific roles grant different functions. Role permissions further control actions such as AI assistance, co-browse control, video calls, outbound voice calls, audit deletion and recovery, and appointment export. Website, channel and subsite assignments also affect what the operator can use.

For supervisors, Manager Permissions separately controls editing operator images, SSO, conversation limits, channels, skills and names. It also controls channel volume changes, spam management, password resets, account unlocking and viewing all appointments. Its View Only choice restricts management screens to viewing.

For administrators, Settings Permissions delegates individual sections, including Operators, Teams, Skillsets, Website and Departments. Its View Only choice makes delegated settings screens read-only. These permissions do not give clients access to Powerfront-managed screens.

For integrations using an operator identity, successful authentication identifies the operator. Each ordinary protected action then checks its required roles and may explicitly exclude a role. An action requiring Developer checks it separately; Settings or Manager does not satisfy that requirement.

Role combinations vary between actions. Do not assume every listed role is required together, or that access to one action grants access to another. Further checks can apply to the selected website, the account being edited and delegated permissions, so passing a role check can still result in access denied.

Configure it

  1. Identify the operator account to change. For an integration, confirm which operator identity it uses.
  2. Open Settings › Account › Operators, edit the operator and select Roles.
  3. Enable the client roles needed, within your authority. Where offered, open the role's permissions panel and adjust the individual choices. For a protected developer action, review Developer separately on General.
  4. Choose Done in each permissions panel, then save the operator account.
  5. Review the website, channel and subsite assignments. Check the intended screen or retry the supported API action using the correct account and website.

Initial role and permission choices depend on the account-creation workflow, any template and the existing account. Ask Powerfront to change operator templates or enable unavailable product capabilities. Changing a template does not update existing operators.

SysAdmin, Super User, SysAdmin View Only and INSIDE Staff are reserved for Powerfront. Powerfront can change Powerfront-managed settings for you. Your own authority limits which client roles and permissions you can assign.

Use the integration's supported authentication method. Operator access tokens can identify an operator where supported. Integration credentials can have separate scope and access rules; assigning a role does not replace credential configuration.

Permissions

Permission Lets you
Audit Grants audit functions, with separate permissions for deletion, recovery and export.
Bot Trainer Grants bot training access.
Chat Grants operator chat functions.
Co-Browse Grants co-browse functions.
Desktop Screen Share Grants desktop screen sharing.
Live Shows Grants live show functions.
Manager Use permitted supervisor and account-management actions, subject to Manager Permissions and account scope.
Monitor Grants monitor access.
PCI Payment Form Grants payment form access where enabled.
Reports Grants reports access.
Reports Dashboard Grants the reporting dashboard; its role control is shown to Powerfront staff.
Scheduling Grants scheduling access.
Settings Use permitted configuration actions and manage operator accounts and roles within your authority, subject to Settings Permissions.
Stats Grants statistics access.
Stats Bar Grants the statistics bar.
Store App Grants Store App access.
Video Chat Grants video chat functions.
Video Feed Grants video feed access.
Voice Grants voice functions.
Super User Reserved for Powerfront.
Developer Satisfy the additional role requirement for protected developer actions; other action-specific checks still apply.
SysAdmin Reserved for Powerfront.
SysAdmin View Only Reserved for Powerfront.
INSIDE Staff Reserved for Powerfront.
Allow AI Rephrase Chat Permissions. Allows AI rephrasing.
Allow AI Spelling/Grammar Check Chat Permissions. Allows AI spelling and grammar checks.
Allow AI Suggestions Chat Permissions. Allows AI reply suggestions.
Allow AI Translations Chat Permissions. Allows AI translation assistance.
Allow AI Scoring Chat Permissions. Allows AI conversation scoring.
View Only Manager Permissions. Restricts the manager to viewing.
Edit Channel Volume Settings Manager Permissions. Allows channel volume changes.
Edit Operator Image Manager Permissions. Allows operator image changes.
Edit Operator SSO Manager Permissions. Allows operator single sign-on changes.
Edit Operator Conversation Limits Manager Permissions. Allows operator workload limit changes.
Edit Operator Channel Settings Manager Permissions. Allows operator channel assignment changes.
Edit Operator Skills Manager Permissions. Allows operator skill assignment changes.
Edit Operator Name Manager Permissions. Allows operator name changes.
Manage Spam Messages Manager Permissions. Allows spam management.
Allow Reset Password Manager Permissions. Allows password resets.
Allow Unlock Account Manager Permissions. Allows account unlocking.
View All Appointments Manager Permissions. Allows viewing all appointments.
Delete Contacts Audit Permissions. Allows contact deletion.
Delete Chats Audit Permissions. Allows chat deletion.
Delete Texts Audit Permissions. Allows text conversation deletion.
Delete Tickets Audit Permissions. Allows ticket deletion.
Delete Calls Audit Permissions. Allows call deletion.
Recover Deleted Items Audit Permissions. Allows recovery of deleted items.
Export Audit Permissions. Allows audit data export.
Video Chat Video Chat Permissions. Allows video calls.
Audio Call Video Chat Permissions. Allows audio calls.
Allow Control Mode Co-Browse Permissions. Allows co-browse control mode.
View Only Stats Bar Permissions. Applies the Stats Bar view-only restriction.
Allow to Start Show from App Live Shows Permissions. Allows starting a live show from the app.
Screen Sharing Store App Permissions. Allows screen sharing.
App Logging Store App Permissions. Allows app logging.
Manual Proactive Conversations Store App Permissions. Allows manual proactive conversations.
Hide Historical Visitors on Floor Store App Permissions. Hides historical floor visitors.
Hide Search Store App Permissions. Hides search.
Restrict Search Store App Permissions. Restricts search.
Show Queue Store App Permissions. Shows the queue.
Manage Tickets (BETA) Store App Permissions. Allows the beta ticket management function.
Export Appointments Scheduling Permissions. Allows appointment exports.
Auto Approve Private Videos Video Feed Permissions. Allows automatic approval of private videos.
Manage Company Video Feed Video Feed Permissions. Allows company video feed management.
Change Owner Video Feed Permissions. Allows video ownership changes.
Upload Video on Desktop Video Feed Permissions. Allows video upload from desktop.
Allow Outbound Voice Permissions. Allows outbound calls.
Allow On-Demand Transfers Voice Permissions. Allows on-demand voice transfers.
View Only Settings Permissions. Makes the delegated Settings screens read-only.
AI Settings Permissions. Allows access to the AI settings section.
Channel Settings Permissions. Allows access to the Channel settings section.
Chat General Settings Permissions. Allows access to the Chat General settings section.
Chat Links Settings Permissions. Allows access to the Chat Links settings section.
Click to Call Settings Permissions. Allows access to the Click to Call settings section.
Companies Settings Permissions. Allows access to the Companies settings section.
Data Fields Settings Permissions. Allows access to the Data Fields settings section.
Departments Settings Permissions. Allows access to the Departments settings section.
Disposition Settings Permissions. Allows access to the Disposition settings section.
Events Settings Permissions. Allows access to the Events settings section.
File Library Settings Permissions. Allows access to the File Library settings section.
Fonts Settings Permissions. Allows access to the Fonts settings section.
Image Library Settings Permissions. Allows access to the Image Library settings section.
Insights Settings Permissions. Allows access to the Insights settings section.
Integration Settings Permissions. Controls delegated integration access; Powerfront-managed screens remain reserved for Powerfront.
Keyboard Shortcuts Settings Permissions. Allows access to the Keyboard Shortcuts settings section.
Legacy Chat Settings Permissions. Allows access to the Legacy Chat settings section.
Monitor View Settings Permissions. Allows access to the Monitor View settings section.
Operators Settings Permissions. Allows access to the Operators settings section.
Pre-Chat Survey Settings Permissions. Allows access to the Pre-Chat Survey settings section.
Regional Settings Settings Permissions. Offers Regional Settings delegation; restrictions vary in this release.
Remote Cameras Settings Permissions. Allows access to the Remote Cameras settings section.
Saved Links Settings Permissions. Allows access to the Saved Links settings section.
Saved Responses Settings Permissions. Allows access to the Saved Responses settings section.
Scheduling Settings Permissions. Allows access to the Scheduling settings section.
Skillsets Settings Permissions. Allows access to the Skillsets settings section.
Teams Settings Permissions. Allows access to the Teams settings section.
Themes Settings Permissions. Allows access to the Themes settings section.
Website Settings Permissions. Allows access to the Website settings section.
Wind Down Reasons Settings Permissions. Allows access to the Wind Down Reasons settings section.

Limits and good to know

  • An operator needs at least one role. Assigning a role does not grant access to every website or enable a product module.
  • A missing role or a hidden or disabled button can reflect product availability, your authority, delegated permissions or website access.
  • Developer does not provide unrestricted configuration or account-management access.
  • Menu visibility does not define every API permission. Individual actions and authentication methods can apply different checks; use the supported requirements for your integration.
  • View Only describes screen restrictions. Do not assume it defines every integration's access.

Depends on and works with

RequiresConfigured byEnhancesRelated
+169 more · used by
View all connections as a list

This feature uses

  • Admin settings and feature switches · managed by PowerfrontConfigured by

    Website feature switches determine which capability-specific roles can be assigned.

  • Operator accountsRequires

    Roles are assigned to an operator account; protected operator API actions need an authenticated operator identity.

  • Website, channel and subsite accessConfigured by

    Website, channel, subsite and action-specific permissions can narrow access beyond roles.

  • Operator templatesConfigured by

    Operator templates can preset roles and delegated permissions for new accounts.

  • Operator LogRelated

    Operator activity history can help review recorded role and permission changes.

  • INSIDE APIRequires

    Role checks apply to protected operator actions in the INSIDE API.

  • Operator access tokensEnhances

    Operator access tokens provide an alternative way to identify an operator where supported.

  • My API Keys and access restrictionsRelated

    Scoped integration credentials have separate access rules from operator roles.

Used by

FAQ and troubleshooting

Why can an operator open Settings but not edit?

Check View Only in Settings Permissions. Ask Powerfront to change fields reserved for Powerfront.

Why can a manager edit an operator's limits but not their name?

Edit Operator Conversation Limits and Edit Operator Name are separate manager permissions.

Why is a role missing or disabled?

Its capability may be unavailable, or your account may not be allowed to assign it. Developer is on General, rather than Roles, and is shown when your account has Developer. Ask Powerfront to enable a missing product capability.

Does the Chat role give access to all websites?

No. Configure website access and its channel or subsite assignments separately.

Is Done enough to save a permission change?

Choose Done in the permissions panel, then save the operator account.

Why does an API action deny access after a successful sign-in?

Confirm the operator identity, the action's required and excluded roles, website access and any additional action permissions. Actions can require different permissions, so the same account may succeed for one action and fail for another.

Does Settings include Developer access?

No. Protected developer actions check Developer separately. Developer also does not grant unrestricted settings or account-management access.

Can I work out an integration's access from its menus and roles?

Menus show available screens, but do not specify every API check. Review the intended action's supported requirements. Integration credentials can have separate scope rules, so review their configuration as well as the operator's roles when the integration uses an operator identity.

INSIDE 3.3 · Source commit 992abb980bContent is a pre-release draft© 2026 Powerfront