> ## Documentation Index
> Fetch the complete documentation index at: https://onextel-09023014.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles

> Control what each user can view, edit, and download across the OneXtel portal using built-in and custom roles.

Roles control what a user can do. Rather than granting blanket access, each role sets
permissions feature by feature — so a reporting analyst can read campaign data without being
able to send messages or change account settings.

## Built-in roles

| Role | Typical use |
| - | - |
| Admin | Full access, including user management and account settings |
| Manager | Day-to-day operation — campaigns, templates, reports |
| Agent | Sending and handling messages |
| Checker | Approving activities where maker-checker is enabled |
| Report Viewer | Read-only access to reports |

## Permissions

Permissions are granted per feature, across three actions:

| Action | Allows |
| - | - |
| View | Seeing the feature and its data |
| Edit | Creating and changing records |
| Download | Exporting data out of the platform |

The features that can be controlled are: New SMS, Campaign, User Management, Credits, Reports,
Telco Reports, DLT, API, Phonebook, Notification, and All Schedule.

<Frame caption="Role Management matrix">
  <img src="https://mintcdn.com/onextel-09023014/YrEWyr0_iQvllDUV/images/platform/roles-matrix.png?fit=max&auto=format&n=YrEWyr0_iQvllDUV&q=85&s=767a0704f39f1cca50b974a9b2654919" alt="Role Management matrix showing view, edit and download permissions per feature for each role" width="1245" height="520" data-path="images/platform/roles-matrix.png" />
</Frame>

<Note>
  **Download** is deliberately separate from **View**. A user can be allowed to read reports on
  screen without being able to export recipient data — useful where the data is sensitive and
  should not leave the platform. Pair it with the Mask Phone and Mask Content settings described
  in [Platform overview](/guides/platform/overview#data-masking).
</Note>

## Create a custom role

When none of the built-in roles fits, create your own.

<Steps>
  <Step title="Open the Roles tab">
    Click **User Management**, then select the **Roles** tab. The Role Management matrix shows
    each existing role as a column and each feature as a row.
  </Step>

  <Step title="Name the role">
    Enter the role name in the **Custom Role** section.
  </Step>

  <Step title="Set the permissions">
    For each feature, select the **View**, **Edit**, and **Download** checkboxes you want to
    grant. Anything left unchecked is denied.
  </Step>

  <Step title="Add it">
    Click **+**.
  </Step>

  <Step title="Create">
    Click **Create** in the pop-up. A confirmation message appears once the role is saved.
  </Step>
</Steps>

## Assign a role to a user

<Steps>
  <Step title="Find the user">
    Click **User Management**, select the **User** tab, and enter the username in the **Search
    by** field.
  </Step>

  <Step title="Open the user">
    In the Action column, click the **Ellipsis** icon for that user.
  </Step>

  <Step title="Set the role">
    Under **Roles** in the User Info section, select or deselect the **Role Type** to grant or
    remove it.
  </Step>

  <Step title="Update">
    Click **Update**.
  </Step>
</Steps>

Roles can also be set when the user is first created — see
[Add a user](/guides/platform/user-management#add-a-user).

## Related

* [User management](/guides/platform/user-management)
* [Platform overview](/guides/platform/overview)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.