# Roles and permissions Assign operator roles and delegated permissions, and understand how they affect screens, actions and API access. *Release 3.3 · admin, supervisor, developer* **Settings › Account › Operators › Roles** · **Settings › Account › Operators** ## What it is Roles determine which INSIDE functions an operator can use. Some roles have a permissions panel for finer control over screens or actions. INSIDE also checks roles when an authenticated operator calls a protected API action, alongside any website or action-specific permissions. ## Who uses it and why Operators use the screens and actions allowed by their account. Supervisors with **Manager** use delegated permissions to manage operators and their workload. **Settings** is the client's top administrative role. Users with **Settings** or **Manager** and the required operator permissions review or change access within their authority. Developers use these assignments to understand why an integration can sign in but still receive an access-denied response. ## Where to find it With **Settings** or **Manager** and the required operator permissions, open **Settings › Account › Operators**, edit the operator and select **Roles**. Use the settings icon beside an enabled role to open its permissions panel, such as **Manager Permissions** or **Settings Permissions**. **Developer** is a separate role control on the operator's **General** tab, shown when your account has **Developer**. API authorisation happens when an action is called; there is no separate client screen listing a universal API access policy. ## How it works For operators, roles such as **Chat**, **Reports** and the channel-specific roles grant different functions. Role permissions further control actions such as AI assistance, co-browse control, video calls, outbound voice calls, audit deletion and recovery, and appointment export. Website, channel and subsite assignments also affect what the operator can use. For supervisors, **Manager Permissions** separately controls editing operator images, SSO, conversation limits, channels, skills and names. It also controls channel volume changes, spam management, password resets, account unlocking and viewing all appointments. Its **View Only** choice restricts management screens to viewing. For administrators, **Settings Permissions** delegates individual sections, including **Operators**, **Teams**, **Skillsets**, **Website** and **Departments**. Its **View Only** choice makes delegated settings screens read-only. These permissions do not give clients access to Powerfront-managed screens. For integrations using an operator identity, successful authentication identifies the operator. Each ordinary protected action then checks its required roles and may explicitly exclude a role. An action requiring **Developer** checks it separately; **Settings** or **Manager** does not satisfy that requirement. Role combinations vary between actions. Do not assume every listed role is required together, or that access to one action grants access to another. Further checks can apply to the selected website, the account being edited and delegated permissions, so passing a role check can still result in access denied. ## Configure it 1. Identify the operator account to change. For an integration, confirm which operator identity it uses. 2. Open **Settings › Account › Operators**, edit the operator and select **Roles**. 3. Enable the client roles needed, within your authority. Where offered, open the role's permissions panel and adjust the individual choices. For a protected developer action, review **Developer** separately on **General**. 4. Choose **Done** in each permissions panel, then save the operator account. 5. Review the website, channel and subsite assignments. Check the intended screen or retry the supported API action using the correct account and website. Initial role and permission choices depend on the account-creation workflow, any template and the existing account. Ask Powerfront to change operator templates or enable unavailable product capabilities. Changing a template does not update existing operators. **SysAdmin**, **Super User**, **SysAdmin View Only** and **INSIDE Staff** are reserved for Powerfront. Powerfront can change Powerfront-managed settings for you. Your own authority limits which client roles and permissions you can assign. Use the integration's supported authentication method. Operator access tokens can identify an operator where supported. Integration credentials can have separate scope and access rules; assigning a role does not replace credential configuration. ### Permissions | Permission | Lets you | |---|---| | Audit | Grants audit functions, with separate permissions for deletion, recovery and export. | | Bot Trainer | Grants bot training access. | | Chat | Grants operator chat functions. | | Co-Browse | Grants co-browse functions. | | Desktop Screen Share | Grants desktop screen sharing. | | Live Shows | Grants live show functions. | | Manager | Use permitted supervisor and account-management actions, subject to Manager Permissions and account scope. | | Monitor | Grants monitor access. | | PCI Payment Form | Grants payment form access where enabled. | | Reports | Grants reports access. | | Reports Dashboard | Grants the reporting dashboard; its role control is shown to Powerfront staff. | | Scheduling | Grants scheduling access. | | Settings | Use permitted configuration actions and manage operator accounts and roles within your authority, subject to Settings Permissions. | | Stats | Grants statistics access. | | Stats Bar | Grants the statistics bar. | | Store App | Grants Store App access. | | Video Chat | Grants video chat functions. | | Video Feed | Grants video feed access. | | Voice | Grants voice functions. | | Super User | Reserved for Powerfront. | | Developer | Satisfy the additional role requirement for protected developer actions; other action-specific checks still apply. | | SysAdmin | Reserved for Powerfront. | | SysAdmin View Only | Reserved for Powerfront. | | INSIDE Staff | Reserved for Powerfront. | | Allow AI Rephrase | Chat Permissions. Allows AI rephrasing. | | Allow AI Spelling/Grammar Check | Chat Permissions. Allows AI spelling and grammar checks. | | Allow AI Suggestions | Chat Permissions. Allows AI reply suggestions. | | Allow AI Translations | Chat Permissions. Allows AI translation assistance. | | Allow AI Scoring | Chat Permissions. Allows AI conversation scoring. | | View Only | Manager Permissions. Restricts the manager to viewing. | | Edit Channel Volume Settings | Manager Permissions. Allows channel volume changes. | | Edit Operator Image | Manager Permissions. Allows operator image changes. | | Edit Operator SSO | Manager Permissions. Allows operator single sign-on changes. | | Edit Operator Conversation Limits | Manager Permissions. Allows operator workload limit changes. | | Edit Operator Channel Settings | Manager Permissions. Allows operator channel assignment changes. | | Edit Operator Skills | Manager Permissions. Allows operator skill assignment changes. | | Edit Operator Name | Manager Permissions. Allows operator name changes. | | Manage Spam Messages | Manager Permissions. Allows spam management. | | Allow Reset Password | Manager Permissions. Allows password resets. | | Allow Unlock Account | Manager Permissions. Allows account unlocking. | | View All Appointments | Manager Permissions. Allows viewing all appointments. | | Delete Contacts | Audit Permissions. Allows contact deletion. | | Delete Chats | Audit Permissions. Allows chat deletion. | | Delete Texts | Audit Permissions. Allows text conversation deletion. | | Delete Tickets | Audit Permissions. Allows ticket deletion. | | Delete Calls | Audit Permissions. Allows call deletion. | | Recover Deleted Items | Audit Permissions. Allows recovery of deleted items. | | Export | Audit Permissions. Allows audit data export. | | Video Chat | Video Chat Permissions. Allows video calls. | | Audio Call | Video Chat Permissions. Allows audio calls. | | Allow Control Mode | Co-Browse Permissions. Allows co-browse control mode. | | View Only | Stats Bar Permissions. Applies the Stats Bar view-only restriction. | | Allow to Start Show from App | Live Shows Permissions. Allows starting a live show from the app. | | Screen Sharing | Store App Permissions. Allows screen sharing. | | App Logging | Store App Permissions. Allows app logging. | | Manual Proactive Conversations | Store App Permissions. Allows manual proactive conversations. | | Hide Historical Visitors on Floor | Store App Permissions. Hides historical floor visitors. | | Hide Search | Store App Permissions. Hides search. | | Restrict Search | Store App Permissions. Restricts search. | | Show Queue | Store App Permissions. Shows the queue. | | Manage Tickets (BETA) | Store App Permissions. Allows the beta ticket management function. | | Export Appointments | Scheduling Permissions. Allows appointment exports. | | Auto Approve Private Videos | Video Feed Permissions. Allows automatic approval of private videos. | | Manage Company Video Feed | Video Feed Permissions. Allows company video feed management. | | Change Owner | Video Feed Permissions. Allows video ownership changes. | | Upload Video on Desktop | Video Feed Permissions. Allows video upload from desktop. | | Allow Outbound | Voice Permissions. Allows outbound calls. | | Allow On-Demand Transfers | Voice Permissions. Allows on-demand voice transfers. | | View Only | Settings Permissions. Makes the delegated Settings screens read-only. | | AI | Settings Permissions. Allows access to the AI settings section. | | Channel | Settings Permissions. Allows access to the Channel settings section. | | Chat General | Settings Permissions. Allows access to the Chat General settings section. | | Chat Links | Settings Permissions. Allows access to the Chat Links settings section. | | Click to Call | Settings Permissions. Allows access to the Click to Call settings section. | | Companies | Settings Permissions. Allows access to the Companies settings section. | | Data Fields | Settings Permissions. Allows access to the Data Fields settings section. | | Departments | Settings Permissions. Allows access to the Departments settings section. | | Disposition | Settings Permissions. Allows access to the Disposition settings section. | | Events | Settings Permissions. Allows access to the Events settings section. | | File Library | Settings Permissions. Allows access to the File Library settings section. | | Fonts | Settings Permissions. Allows access to the Fonts settings section. | | Image Library | Settings Permissions. Allows access to the Image Library settings section. | | Insights | Settings Permissions. Allows access to the Insights settings section. | | Integration | Settings Permissions. Controls delegated integration access; Powerfront-managed screens remain reserved for Powerfront. | | Keyboard Shortcuts | Settings Permissions. Allows access to the Keyboard Shortcuts settings section. | | Legacy Chat | Settings Permissions. Allows access to the Legacy Chat settings section. | | Monitor View | Settings Permissions. Allows access to the Monitor View settings section. | | Operators | Settings Permissions. Allows access to the Operators settings section. | | Pre-Chat Survey | Settings Permissions. Allows access to the Pre-Chat Survey settings section. | | Regional Settings | Settings Permissions. Offers Regional Settings delegation; restrictions vary in this release. | | Remote Cameras | Settings Permissions. Allows access to the Remote Cameras settings section. | | Saved Links | Settings Permissions. Allows access to the Saved Links settings section. | | Saved Responses | Settings Permissions. Allows access to the Saved Responses settings section. | | Scheduling | Settings Permissions. Allows access to the Scheduling settings section. | | Skillsets | Settings Permissions. Allows access to the Skillsets settings section. | | Teams | Settings Permissions. Allows access to the Teams settings section. | | Themes | Settings Permissions. Allows access to the Themes settings section. | | Website | Settings Permissions. Allows access to the Website settings section. | | Wind Down Reasons | Settings Permissions. Allows access to the Wind Down Reasons settings section. | ## Limits and good to know - An operator needs at least one role. Assigning a role does not grant access to every website or enable a product module. - A missing role or a hidden or disabled button can reflect product availability, your authority, delegated permissions or website access. - **Developer** does not provide unrestricted configuration or account-management access. - Menu visibility does not define every API permission. Individual actions and authentication methods can apply different checks; use the supported requirements for your integration. - **View Only** describes screen restrictions. Do not assume it defines every integration's access. ## Depends on and works with ### This feature uses - **Requires** [Operator accounts](ADM-007.md): Roles are assigned to an operator account; protected operator API actions need an authenticated operator identity. - **Requires** [INSIDE API](EXT-018.md): Role checks apply to protected operator actions in the INSIDE API. - **Configured in** Admin settings and feature switches (managed by Powerfront): Website feature switches determine which capability-specific roles can be assigned. - **Configured in** [Website, channel and subsite access](ADM-009.md): Website, channel, subsite and action-specific permissions can narrow access beyond roles. - **Configured in** [Operator templates](ADM-011.md): Operator templates can preset roles and delegated permissions for new accounts. - **Works better with** [Operator access tokens](SEC-011.md): Operator access tokens provide an alternative way to identify an operator where supported. - **Related** [Operator Log](REP-022.md): Operator activity history can help review recorded role and permission changes. - **Related** [My API Keys and access restrictions](SEC-012.md): Scoped integration credentials have separate access rules from operator roles. ### Used by - **Configures** [Visitor data mapping for targeting](VIS-007.md): Role access and View Only restrictions control mapping changes. - **Configures** [Visitor flags and custom scores](VIS-008.md): Role access and View Only restrictions control definition changes. - **Configures** [Page tags and conversation tags](VIS-009.md): Role permissions affect saved tag changes and removals. - **Configures** [Live visitors on the floor](VIS-012.md): Operator roles and permissions control access to the relevant workspace and settings. - **Configures** [Visitor search and filters](VIS-013.md): Store App role permissions control hiding and restricting mobile search. - **Configures** [Saved search filters](VIS-014.md): Store App search restrictions apply when running a shortcut. - **Configures** [INSIDE console](CON-001.md): Your roles and permissions determine which work areas you can use. - **Configures** [Operator availability status](CON-002.md): Roles and permissions control chat and voice eligibility and configuration access. - **Configures** [Floor search and filters](CON-007.md): Store App permissions control historical floor access. - **Configures** [My Look operator avatar choices](CON-011.md): Role restrictions affect available items and imagery controls. - **Configures** [Teams Overview and Manager Mode](CON-022.md): Roles determine access to supervisor views and operator editing. - **Configures** [Stats Bar and My Stats](CON-024.md): Roles control the statistics bar, personal results entry and global layout actions. - **Configures** [Monitor mode](CON-025.md): The Monitor role controls starting the display. - **Configures** [Console keyboard shortcuts](CON-026.md): The Settings role controls shortcut management. - **Configures** [Festive floor themes](CON-028.md): Settings access enables the website controls and Manager access allows website floor defaults to be saved. - **Configures** [Academy coaching and message feedback](CON-030.md): The Manager role controls adding coaching comments and client access to the feedback tab. - **Configures** [Business Feed message highlights](CON-031.md): Supporting operator roles affect whether business subjects are loaded. - **Configures** [Calendar appointments and reminders](CON-032.md): The Scheduling role enables operator appointment access. - **Configures** [Mobile console](CON-033.md): Store App permissions control mobile screens and actions. - **Configures** [INSIDE Store App for mobile](CON-034.md): Store App role options control available app actions and logging permission. - **Configures** [Departments](CHAT-006.md): Role permissions govern administration and delegated changes. - **Configures** [Skillsets and skills-based routing](CHAT-007.md): Role permissions control skill catalogue access and delegated operator skill editing. - **Configures** [Chat limits and wind-down](CHAT-008.md): Roles govern who may edit another operator's limits. - **Configures** [Internal comments](CHAT-014.md): Operator roles govern feedback management and access to operator account controls. - **Configures** [Saved responses](CHAT-015.md): Role permissions govern shared-response management and view-only access. - **Configures** [Dispositions](CHAT-019.md): Settings permissions control management of the disposition list. - **Configures** [Spam review and blocking](CHAT-020.md): Manager permissions control access to the spam review screen. - **Configures** [Censorship and abuse warnings](CHAT-021.md): Censorship setup is restricted to administrative access. - **Configures** [Sentiment and emotion](CHAT-022.md): Sentiment configuration is an administrator-only screen. - **Configures** [Conversation translation](CHAT-023.md): AI role permissions control whether an operator can use AI translations. - **Configures** [Transcripts by email and print](CHAT-025.md): Operator permissions and administrative access control transcript actions and templates. - **Configures** [Tags and conversation data](CHAT-031.md): Roles and delegated permissions control tag changes and access to data field configuration. - **Configures** [Redacting and permanently deleting conversation data](CHAT-032.md): Operator permissions control the available deletion and personal-data actions. - **Configures** [AI feature settings and change history](AI-001.md): Roles and permissions control AI configuration access. - **Configures** [AI instructions and templates](AI-002.md): Roles control access to instruction editing. - **Configures** [Autopilot handover and error handling](AI-004.md): AI configuration permissions control who can change the recovery options. - **Configures** [Copilot reply suggestions](AI-006.md): Chat permissions control operator access. - **Configures** [Fix and Re-Phrase for operator drafts](AI-007.md): Chat permissions control access to each tool. - **Configures** [Ask AI beside a visitor conversation](AI-008.md): Operator roles and Chat permissions control access. - **Configures** [AI conversation summaries](AI-009.md): Roles control summary configuration and conversation access. - **Configures** [Chat Translate and language detection](AI-010.md): Operator permissions control use and administration. - **Configures** [AI spam checks for incoming conversations](AI-011.md): Roles and permissions control configuration and spam review. - **Configures** [Email Autopilot for tickets](AI-012.md): Role permissions control AI configuration and event access. - **Configures** [Voice Autopilot call handling](AI-013.md): Roles and AI permissions control configuration access. - **Configures** [AI run limits](AI-014.md): Roles and AI permissions control feature configuration access. - **Configures** [Context Compiler for AI conversations](AI-015.md): Roles and AI permissions control feature configuration. - **Configures** [AI functions and required inputs](AI-016.md): Roles and AI permissions control catalogue access. - **Configures** [AI knowledge and web search](AI-017.md): Roles and AI permissions control configuration access. - **Configures** [AI integrations and automation tools](AI-018.md): Roles and AI permissions control function configuration. - **Configures** [AI updates to customer and conversation data](AI-019.md): Roles and AI permissions control configuration. - **Configures** [Reusable AI skills and instructions](AI-020.md): Roles and AI permissions control skill management. - **Configures** [Customer goals and AI progress tracking](AI-021.md): Roles control configuration access. - **Configures** [AI conversation plans and task progress](AI-022.md): Roles control configuration access. - **Configures** [Specialist sub-agents for AI tasks](AI-023.md): Roles control function and feature configuration. - **Configures** [AI product suggestion settings](AI-027.md): Chat and configuration roles control the available actions. - **Configures** [AI conversation quality scoring](AI-029.md): Chat, Allow AI Scoring and Manager control viewing and review actions. - **Configures** [AI resolution and first-contact metrics](AI-030.md): Configuration access follows roles and Settings Permissions. - **Configures** [AI assistance activity](AI-033.md): Roles control access to feature configuration and reporting. - **Configures** [Virtual Try-On with customer photos](AI-035.md): AI configuration permissions control function setup. - **Configures** [Ask AI agents in Team Chat](AI-036.md): Chat access and AI permissions determine operator eligibility. - **Configures** [AI reply streaming settings](AI-037.md): AI configuration permissions control streaming setup. - **Configures** [Conversation history tools for AI](AI-038.md): AI configuration permissions control who can enable the tools. - **Configures** [Images and attachments for AI agents](AI-039.md): AI configuration and operator permissions control setup and access. - **Configures** [AI result processor templates](AI-040.md): AI configuration permissions control processor management. - **Configures** [SMS consent and number blocking](CHN-023.md): Roles control access to the SMS blacklist screen. - **Configures** [Email sender blocking and exceptions](CHN-030.md): Roles control list-management and event-screen access. - **Configures** [Ticket sources and email event automation](CHN-032.md): Roles determine access to source and email-event management. - **Configures** [Voice provider accounts and telephone numbers](RTC-001.md): Roles control access to voice configuration and call handling. - **Configures** [Telephone business hours and fallback handling](RTC-002.md): Settings permissions control access to telephone business hours and fallback actions. - **Configures** [Voice queue and call offers](RTC-003.md): The Voice role controls whether operators can receive telephone calls. - **Configures** [Operator telephone audio setup](RTC-004.md): Operator roles control access to voice. - **Configures** [Outbound calling permissions and restrictions](RTC-005.md): Voice and Allow Outbound permissions control operator access to dialling. - **Configures** [Voice call controls](RTC-006.md): The Voice role controls operator access to telephone call handling. - **Configures** [Telephone call transfers](RTC-007.md): Voice permissions control which operators can handle telephone transfers. - **Configures** [Telephone call monitoring and whisper mode](RTC-008.md): Manager access controls the coaching action. - **Configures** [Telephone callback requests](RTC-009.md): Voice and Allow Outbound permissions control whether an operator can complete a callback. - **Configures** [Voicemail messages and follow-up](RTC-010.md): Voice permissions control operator access to voicemail work and outbound follow-up. - **Configures** [IVR telephone menus and execution history](RTC-011.md): Settings access controls menu configuration, while Developer access controls the execution viewer. - **Configures** [Telephone music and greetings](RTC-012.md): Settings permissions control who can maintain telephone music and greetings. - **Configures** [Call recording](RTC-013.md): Settings permissions control number recording options and recording retention. - **Configures** [Telephone transcription](RTC-014.md): Operator roles control voice handling and access to number configuration. - **Configures** [Telephone call recovery and wrap-up](RTC-015.md): Roles control voice handling and access to voice settings. - **Configures** [Telephone directory and number blocking](RTC-016.md): Settings access governs directory and blacklist management. - **Configures** [Browser video and audio calls](RTC-017.md): Video Chat role permissions separately allow video and audio calls. - **Configures** [Browser call controls and device settings](RTC-018.md): Operator roles control access to browser calling. - **Configures** [Operator screen sharing with visitors](RTC-019.md): Operator roles include Desktop Screen Share access. - **Configures** [Browser call connection and quality](RTC-020.md): Role access controls browser calling and access to diagnostic views. - **Configures** [Live show setup and scheduling](RTC-022.md): Live Shows role permissions control show management and Store Template access. - **Configures** [Live show broadcasting](RTC-023.md): The Live Shows role controls host and management access. - **Configures** [Live show Showcase and product interactions](RTC-024.md): The Live Shows role controls access to edit and present Showcase content. - **Configures** [Live show questions and moderation](RTC-025.md): Live Shows access controls host management actions. - **Configures** [Live show RSVP, reminders and follow-up](RTC-026.md): Live Shows access controls email-template and registration-list management. - **Configures** [Live show recordings and publishing](RTC-027.md): The Live Shows role controls access to the management screens. - **Configures** [Past show attendance and activity](RTC-028.md): Access to the show management screens is set through roles. - **Configures** [Company Shows with prerecorded videos](RTC-029.md): Video Feed permissions control management access. - **Configures** [Co-Browse with website visitors](RTC-030.md): Operator roles control access to Co-Browse. - **Configures** [Co-Browse viewing and Control Mode](RTC-031.md): The Co-Browse permission options control access to Control Mode. - **Configures** [Remote camera registration and access](RTC-033.md): Settings permissions control remote-camera management access. - **Configures** [Remote cameras in browser calls](RTC-034.md): Operator call access is controlled through roles. - **Configures** [QR codes for chat links](RTC-035.md): Roles and permission options determine who manages chat links. - **Configures** [Click to Call callback form](RTC-036.md): Roles determine access to form configuration and visitor events. - **Configures** [Commerce provider setup and selection](COM-001.md): Roles and permissions control commerce administration. - **Configures** [Shopify commerce connection](COM-002.md): Roles control connection administration. - **Configures** [Salesforce B2C Commerce connection](COM-003.md): Roles control provider administration. - **Configures** [BigCommerce store connection](COM-004.md): Roles control connection administration. - **Configures** [UCP product catalogue connection](COM-005.md): Roles control selection and administration of the commerce provider. - **Configures** [Custom commerce integrations](COM-006.md): Roles control provider administration. - **Configures** [AI customer and order search](COM-011.md): Roles control administration of the provider and AI configuration. - **Configures** [Customer and order access](COM-012.md): Roles control access to provider administration. - **Configures** [Product card configuration and shopping actions](COM-014.md): Settings permissions control configuration access. - **Configures** [Order card configuration and access](COM-015.md): Settings permissions control configuration access. - **Configures** [PCI Payment Form in web chat](COM-024.md): Operator access includes the PCI Payment Form role option. - **Configures** [Conversation lead capture and follow-up](COM-026.md): Operator roles and personal-data permissions affect available lead actions. - **Configures** [AI commerce functions and access limits](COM-029.md): Roles control who can edit AI Functions and providers. - **Configures** [Report selection and filters](REP-001.md): The Reports role controls access to the reporting workspace. - **Configures** [Social messaging and SMS reports](REP-012.md): The Reports role controls workspace access. - **Configures** [Event, link and Virtual Assistant reports](REP-013.md): Report access is controlled by operator roles. - **Configures** [Missed opportunity estimates and reports](REP-014.md): Report and dashboard access depend on operator roles. - **Configures** [Service Overview performance comparisons](REP-015.md): The Manager role gives client accounts access to Performance. - **Configures** [Service Overview dashboard](REP-016.md): Account roles determine which Service Overview tabs are available. - **Configures** [Operation Analysis of visitor and sales activity](REP-017.md): The Stats role controls access to History. - **Configures** [Reports Dashboard and business filters](REP-018.md): Both Reports and Reports Dashboard roles are required for client accounts. - **Configures** [Report downloads and email sharing](REP-019.md): Reporting access depends on account roles. - **Configures** [Favourite reports and column selection](REP-020.md): The Reports role controls workspace access; Powerfront manages shared column defaults. - **Configures** [Audit search for retained customer records](REP-021.md): The Audit role and its separate action permissions control the available tools. - **Configures** [Operator Log](REP-022.md): The Reports role controls access to the report. - **Configures** [Availability Log for routing investigations](REP-023.md): The Developer role controls client access to availability history. - **Configures** [Autonomous AI performance reports](REP-024.md): Roles control reporting and service-overview access. - **Configures** [AI conversation scoring reports](REP-025.md): The Reports role controls access to these tables. - **Configures** [AI assistance, translation and sentiment reports](REP-026.md): Reporting access is controlled by roles. - **Configures** [Voice, video and live show reports](REP-027.md): Roles control report and settings access. - **Configures** [Business Feed and Academy reports](REP-028.md): The Reports role controls access. - **Configures** [Personalised performance insights](REP-029.md): Roles and settings restrictions control website insight configuration. - **Configures** [Reporting data availability and warning logs](REP-030.md): Developer and Reports roles grant different diagnostic and reporting access. - **Configures** [Operator QA and coaching dashboard](REP-031.md): The Manager role grants client access to dashboard data. - **Configures** [Subsites](ADM-003.md): Administrator privileges control access to subsite administration. - **Configures** [Website and regional settings](ADM-004.md): Roles and screen permissions control editing. - **Configures** [Saving settings](ADM-005.md): Roles and delegated permissions govern settings access. - **Configures** [Operator accounts](ADM-007.md): Role and delegated permissions control operator administration. - **Configures** [Website, channel and subsite access](ADM-009.md): Roles and delegated permissions govern available screens, actions and editing. - **Configures** [Operator settings](ADM-010.md): Roles and delegated manager permissions determine editable fields. - **Configures** [Operator templates](ADM-011.md): Administrator privileges control who can maintain operator templates. - **Configures** [Importing and exporting operators](ADM-012.md): The importing user's authority limits permitted roles and accounts. - **Configures** [Teams](ADM-013.md): Roles and delegated permissions govern administration. - **Configures** [Business hours and scheduling](ADM-016.md): Scheduling roles and delegated permissions control access. - **Configures** [File library](ADM-017.md): Delegated Settings permissions control library administration. - **Configures** [Attachment file types and virus scanning](ADM-018.md): Video Feed permissions control media review and eligible automatic approval. - **Configures** [Image and font libraries](ADM-019.md): Settings permissions control image and font administration. - **Configures** [Content library](ADM-020.md): Account roles determine access to the Content Library destination. - **Configures** [Supported languages](ADM-022.md): Administrator privileges control supported-language administration. - **Configures** [Finding your way around Settings](ADM-028.md): Roles and delegated permissions determine screen access and view-only behaviour. - **Configures** [Companies](ADM-029.md): Delegated Settings access includes a Companies screen permission. - **Configures** [Wind-down and transfer reasons](ADM-030.md): Settings roles and delegated screen permissions control reason administration. - **Configures** [Login and email verification](SEC-001.md): Roles and delegated permissions control account administration and app access. - **Configures** [Password changes and recovery](SEC-002.md): Delegated permissions control administrative password recovery. - **Configures** [Two-factor authentication for operator sign-in](SEC-003.md): Operator-management permissions control who can edit another account. - **Configures** [Logout and remembered computers](SEC-004.md): Roles and delegated permissions control access to operator administration. - **Configures** [Single sign-on with SAML 2.0](SEC-005.md): Delegated permissions control who can edit operator SSO selections. - **Configures** [Single sign-on with OAuth 2.0](SEC-006.md): Delegated permissions control operator SSO editing. - **Configures** [My API Keys and access restrictions](SEC-012.md): The Developer role controls the available credential-management API actions. - **Configures** [Email verification for protected exports](SEC-013.md): Export permissions are separate from successful email verification. - **Configures** [Personal data export](SEC-014.md): Audit and its Export permission control the workspace and export action shown to operators. - **Configures** [Customer data deletion and recovery](SEC-019.md): Audit permissions control which deletion and recovery actions are shown. - **Configures** [Permanent deletion of retained customer data](SEC-020.md): Audit recovery access determines whether the relevant controls are shown. - **Configures** [Captured data expiry and message sanitisation](SEC-022.md): Settings and Bot Trainer roles control access to the relevant field editors. - **Configures** [Custom scripts managed by Powerfront](EXT-015.md): Development tools and script management have separate access checks. - **Configures** [Integration script selection for automated actions](EXT-016.md): Role permissions control access to each editor that offers script selection. - **Configures** [INSIDE API](EXT-018.md): Each protected API operation applies its required role checks. - **Configures** [API request testing and diagnostics](EXT-019.md): Developer access controls the console, while each operation has its own permissions. - **Configures** [Media callbacks and embedded form results](EXT-021.md): The video owner's permissions affect automatic approval of private videos. - **Configures** [Custom scripts in email event rules](EXT-022.md): Settings, Events and editing restrictions govern management of the visible rules. - **Configures** [Operator CLI requests and browser login](EXT-024.md): The operator's native API permissions still control each operation. ## FAQ and troubleshooting ### Why can an operator open Settings but not edit? Check **View Only** in **Settings Permissions**. Ask Powerfront to change fields reserved for Powerfront. ### Why can a manager edit an operator's limits but not their name? **Edit Operator Conversation Limits** and **Edit Operator Name** are separate manager permissions. ### Why is a role missing or disabled? Its capability may be unavailable, or your account may not be allowed to assign it. **Developer** is on **General**, rather than **Roles**, and is shown when your account has **Developer**. Ask Powerfront to enable a missing product capability. ### Does the Chat role give access to all websites? No. Configure website access and its channel or subsite assignments separately. ### Is Done enough to save a permission change? Choose **Done** in the permissions panel, then save the operator account. ### Why does an API action deny access after a successful sign-in? Confirm the operator identity, the action's required and excluded roles, website access and any additional action permissions. Actions can require different permissions, so the same account may succeed for one action and fail for another. ### Does Settings include Developer access? No. Protected developer actions check **Developer** separately. **Developer** also does not grant unrestricted settings or account-management access. ### Can I work out an integration's access from its menus and roles? Menus show available screens, but do not specify every API check. Review the intended action's supported requirements. Integration credentials can have separate scope rules, so review their configuration as well as the operator's roles when the integration uses an operator identity.