Manage Roles and Permissions
Restrict the data that users have access on the platform using roles and permissions
Panel has two tabs.
Tab: Manage Roles
Intro: Create and manage roles and their permissions for your organization.
Create / edit role
- Create New Role opens New Role (or Edit Role when editing).
- Fields:
- Display Name * (internal name is derived, e.g.
Internal Auditor→internal_auditor) - Description (optional)
- Permissions (N selected) — hierarchical checklist by module (e.g. Contracts → groups like Contract Data Viewing, Contract Actions); expand/collapse modules; select individual permissions or use module-level checkboxes where provided.
- Display Name * (internal name is derived, e.g.
- Create or Update + Cancel.
Existing Roles
- Existing Roles (N) — one card per active role.
- Row: role name, expand to see description and permission tags; count of permissions when collapsed.
- Actions: Edit role (pencil), Deactivate role (trash) — deactivates the role (confirm).
Tab: Manage User Assignments
Intro: Assign roles to users and manage existing assignments.
Bulk assign via CSV
- Same pattern as departments: Download the template, put x (or ✓) under the role column for each user, Upload CSV.
- Download template requires at least one active role and at least one org user.
Assign role to user
- User — Select user
- Role — Select role
- Assign — creates/links the assignment.
User role assignments table
- User role assignments (N) with Download all (CSV audit).
- Columns: Name (and email on second line), Department, Role(s) badge, actions:
- Edit assignment (pencil) — change role via dropdown, Save / Cancel
- Change password (key) — same password dialog as Manage Users
- Remove (trash) — remove role assignment (confirm flow in app)
Permissions
Only admins with access to Admin Settings and these cards can manage users and roles. If a button is missing, your role does not include the required permission. The following is a list of permissions available in the application:
Module Access Permissions
| Display Name | Description |
|---|---|
| Contracts Module | Access to contracts module |
| Invoices Module | Access to invoices module |
| Finance/AP Module | Access to finance and accounts payable module |
| FP&A Module | Access to financial planning and analysis module |
| Relationships Module | Access to contract relationships module |
| Admin Panel | Access to admin panel |
Contract Data Viewing Permissions
| Display Name | Description |
|---|---|
| View Basic Contract Info | View basic contract information |
| View Renewal & Termination Terms | View renewal and termination terms |
| View Financial Terms | View financial terms and payment information |
| View Legal & Compliance Terms | View legal and compliance clauses |
| View Operational Terms | View operational terms and requirements |
| View Data Security Terms | View data security and privacy clauses |
| View Obligations | View contract obligations |
| View Risk Analysis | View contract risk assessments |
| View/Download Source PDF | Access and download source contract documents |
| Use AI Chat Assistant | Use AI-powered chat assistant |
| Access Full Contract Text | Access full raw contract text (contract_content) for LLM pipelines, gold standard creation, and comparison. Users without this permission receive structured-field fallback or are denied depending on the feature. |
Contract Actions Permissions
| Display Name | Description |
|---|---|
| Create Contracts | Create new contracts |
| Edit Contract Details | Edit contract information and fields |
| Delete Contracts | Delete contracts permanently |
| Archive Contracts | Archive contracts |
| Re-analyze Contracts | Trigger contract re-analysis |
| Export/Download Contract Data | Export and download contract data |
| Compare Contracts | Compare multiple contracts |
| Compare with Gold Standard | Compare contracts against gold standards |
| Update Gold Standard | Update gold standard contracts |
| Manage Gold Standards & Contract Types | Manage gold standard contracts and contract types |
| Manage Contract Access/Sharing | Control contract access and sharing |
| Sync to Source System | Push AI-extracted contract data back to the originating source system (e.g. Ironclad) |
Invoice & Reconciliation Permissions
| Display Name | Description |
|---|---|
| Create Invoices | Create new invoices |
| Edit Invoices | Edit invoices and match to contracts |
| View Reconciliation Status | View invoice reconciliation status |
| Export/Download Invoice Data | Export and download invoice data |
Views & Customization Permissions
| Display Name | Description |
|---|---|
| Add/Edit Custom Fields | Create and manage custom fields |
| Manage Field Label Customization | Rename standard contract fields to match organization terminology |
| Create Custom Views | Create custom contract views |
| Edit Custom Views | Edit custom contract views |
| Delete Custom Views | Delete custom contract views |
| Share Views with Others | Share custom views with other users |
Analytics Permissions
| Display Name | Description |
|---|---|
| Cross-Company Analytics | Access cross-company analytics |
Organization Administration Permissions
| Display Name | Description |
|---|---|
| Update Organization Settings | Update organization information and settings |
| User Management | Manage users in the organization |
| Roles & Permissions Management | Manage roles and permissions |
| Manage Departments | Manage organization departments |
| View User Activity Logs | View user activity and audit logs |
| Manage OAuth/SSO | Manage OAuth applications and SSO settings |
| Manage Authentication Methods | Configure authentication methods for users |
| View Clause Library | Access to view the clause library |
| Manage Clause Library | Create and manage clause library entries |
| Manage Playbooks | Manage contract playbooks |
| Manage Reconciliation Rules | Manage invoice reconciliation rules |
| Manage Contract Types | Manage contract types |
| Manage Contract Tags | Manage contract tags |
| Bulk Re-analyze All Contracts | Trigger bulk re-analysis of all contracts |
| View Contract Processing Errors | View contract intake and processing errors |
| System-Wide Settings | Manage system-wide configuration |
| Contract Projects (navigation) | Access the Contract Projects area in the sidebar |
| Manage Contract Projects | Create, edit, and assign users to contract projects (sandboxes) |
Did this answer your question?