Roles and Permissions: How to Control User Access in the B2B Dashboard

Roles control what users and teams can do within the B2B Dashboard. The system supports both global roles that apply across the entire tenant and team-level roles that are scoped to specific teams.

Accessing Roles

Navigate to Admin > Roles in the sidebar. The Roles page displays a table with the following columns:

Name — The role's display name
Permissions — Number of permissions assigned to this role
Users — Count of users with this role
Type — Shows either Global (applies tenant-wide) or Team: [count] (applies to specific teams)
Created At — When the role was created

Click a role name or the View button to manage the role's configuration.

Creating a New Role

Click the Add Role button
Enter the role name
Configure permissions by toggling individual permission checkboxes
Click Save

Viewing and Editing a Role

The Role detail view has four tabs:

Configuration Tab

Name — Edit the role name
Global Role — Toggle whether this role applies globally across the tenant or only to specific teams
Danger Zone — Delete the role (requires confirmation)

Permissions Tab

The permissions tab provides granular control over what the role can do:

Search — Filter permissions by keyword
Filter — Narrow permissions by category or group
Each permission has a live toggle checkbox — changes are applied immediately when checked
A Save button is available to commit permission changes

Permission categories include access to:

Users (view, create, edit, delete, impersonate)
Teams (view, create, edit, delete, assign)
Catalog items (view, create, edit, delete)
Enrollments (view, create, delete)
Reports (view, generate, export)
Settings (view, edit)
And more

Users Tab

Lists all users assigned this role. From here you can:

View which users have this role
Remove the role from individual users

Teams Tab

Shows all teams that have this role assigned. This tab includes:

A list of teams with this role
Assign Role To Team — Opens a modal to select a team and assign this role
Remove Role — Removes the role from a specific team

Role Types

Global Roles: Apply to a user across all teams and contexts. Best for super admins and tenant-wide managers.

Team Roles: Apply only when the user is acting within the context of a specific team. Allows the same user to have different permission levels in different teams.

Best Practices

Use global roles sparingly — prefer team-level roles for day-to-day administration
Create roles based on job functions (e.g., Team Manager, Content Admin, Report Viewer)
Audit role assignments regularly using the Users tab
Use the permission search to quickly verify a role has the correct access