Skip to main content

Configure roles and permissions

Last updated July 23, 2026

Roles provide a repeatable set of permissions for people who do similar work. Use them to give staff the access they need while keeping company settings, financial actions, and sensitive work limited to the right people.

Before you begin​

Only authorized administrators should change roles. Review who currently uses a role before removing access because a saved change affects every staff member assigned to that role.

Open Role Permissions Management​

Go to Settings → People → Roles & Permissions.

  1. Choose Office Permissions for office roles or Technician Permissions for field roles.
  2. Open Select Office Role or Select Technician Role.
  3. Choose the role you want to review.
  4. Review the selected-permission summary before making changes.

Office and technician roles have different permission groups, so review the correct tab first.

Change a role's permissions​

  1. Select the role.
  2. Open each permission category that applies to the role's work.
  3. Turn on individual permissions the role needs.
  4. Turn off permissions that are no longer appropriate.
  5. Use a category-level selection only when the role should receive every permission in that category.
  6. Review the permission count and any partially selected categories.
  7. Click Save Changes.

Use the smallest practical access set. For example, a person who prepares invoices may need to view and edit them but may not need to manage company-wide accounting or payment settings.

Partially selected categories contain a mix of enabled and disabled permissions.

Cancel unsaved changes​

  1. Before saving, click Cancel.
  2. Confirm the selected permissions return to the role's saved state.
  3. If needed, select another role and return to verify no unintended change remains.

Verify a staff member's access​

  1. Go to Settings → People → Staff.
  2. Find the person and open the three-dot Actions menu.
  3. Select View permissions.
  4. Confirm their assigned role and access summary.
  5. If the role is wrong, edit the staff member rather than changing a shared role to solve one person's assignment.

Use business unit assignments and security for access that depends on team or unit membership.

What happens next​

Staff assigned to the changed role receive its saved permission set. The pages and actions they can see may change the next time the interface refreshes.

Troubleshooting​

A permission change appears to have no effect​

Confirm you changed the role assigned to that staff member. Save the role, then ask the staff member to refresh Nexus and reopen the workspace.

An action is unavailable even though the role looks correct​

The action may also require business unit assignment, feature availability, record access, or another prerequisite. Review the staff member's assignments and security.

The wrong group of permissions appears​

Check whether you selected Office Permissions or Technician Permissions, then choose the role again.