Permission Overrides
Section titled “Permission Overrides”A permission override adjusts one user’s effective access without changing the base role for everyone else.
When to use an override
Section titled “When to use an override”Use an override for a narrow exception, such as:
- A manager who also needs access to one financial report
- A staff member who should be blocked from a sensitive export
- A temporary project responsibility that does not justify a new organization-wide role
When to create a custom role instead
Section titled “When to create a custom role instead”If several users need the same exception, create a custom role. Repeated one-off overrides are harder to audit and maintain.
Review effective access
Section titled “Review effective access”When troubleshooting permissions, check both the assigned role and any per-user overrides. The effective permission is the combination of those layers.
Revisit temporary access
Section titled “Revisit temporary access”Remove overrides when the project or responsibility ends. Periodic access reviews help prevent old exceptions from becoming permanent by accident.