Role permissions | HUMAN Documentation

You can view role permissions as well as create new roles from your Platform settings. Role permissions are split by product. Your account comes with default roles and permissions, which are listed in this article.

Prerequisites

To create and manage custom roles, you need to be at least an IT/Devops Platform role

Default role permissions

Account Defender

Name	Permissions
Viewer Explore and investigate data	View Explore > Dashboard and Investigation View rules Policies > Policy Rules View lists in Policies > List Management View actions in Settings > Action Settings
Admin Full access to all settings and pages	View Explore > Dashboard and Investigation Update an Account status View Explore > Business Insights View and manage rules Policies > Policy Rules View and manage lists in Policies > List Management View and manage actions in Settings > Action Settings Export data into CSVs

Bot Defender

Name	Permissions
Viewer Explore and investigate data	View Explore > Dashboards, Investigation, andReports View Policies > Overview and Policy Settings View Settings > Product Settings, Precheck Settings, and Data > Configuration
Developer View data and customize integrations	View Explore > Dashboards, Investigation, and Reports View Policies > Overview and Policy Settings View Settings > Product Settings, Precheck Settings, and Data > Configuration Developer and integration capabilities
Analyst Explore, investigate, and manage data	View and manage Explore > Dashboards, Investigation, and Reports Exonerate users View and manage Policies > Overview and Policy Settings View Settings > Product Settings, Precheck Settings, and Data > Configuration Developer and integration capabilities
Admin Full access to all settings and pages	View and manage Explore > Dashboards, Investigation, and Reports Exonerate users Activate or disable an application View and manage Policies > Overview and Policy Settings View and manage Settings > Product Settings, Precheck Settings, and Data > Configuration Configure and manage data exports Developer and integration capabilities

Code Defender

Name	Permissions
Viewer Explore and investigate data	View scripts, incidents, and actions View reports and audits View vendors View policy rules View PCI DSS data View system settings
Developer View data and customize integrations	View and manage scripts, incidents, and actions View reports and audits View and manage vendors View integrations View notification settings View policy rules Manage Client-side Defense policy rules Manage PCI-DSS policy rules View PCI DSS data Manage PCI DSS justification Manage PCI DSS authorization View system settings
Admin Full access to all settings and pages	View and manage scripts, incidents, and actions View reports and audits View and manage vendors View and manage integrations View and manage notification settings View policy rules Manage Client-side Defense policy rules Manage PCI-DSS policy rules View PCI DSS data Manage PCI DSS justification Manage PCI DSS authorization View and manage system settings
PCI Justifier (advanced role) View and justify scripts	For large enterprises requiring two separate reviewers (an Authorizer and a Justifier) for PCI DSS scripts. View and manage scripts, incidents, and actions View reports and audits View and manage vendors View integrations View notification settings View policy rules View PCI DSS data Manage PCI DSS justification View system settings
PCI Authorizer (advanced role) View and authorize scripts	For large enterprises requiring two separate reviewers (an Authorizer and a Justifier) for PCI DSS scripts. View and manage scripts, incidents, and actions View reports and audits View and manage vendors View integrations View notification settings View policy rules View PCI DSS data Manage PCI DSS authorization View system settings

Credential Intelligence

Name	Permissions
Viewer Explore and investigate data	View Dashboard and Investigation

Sightline Cyberfraud Defense

Name	Permissions
Viewer Explore and investigate data	View Overview View Explore > Traffic, Accounts, Reports, and Custom Dashboards View Investigate > Account Takeover, Fake Accounts, and Traffic Analyzer. View Policies > Policy Overview, Policy Settings, Account Policies, and Policy Lists. View Settings > Mitigation and Data Export
Developer View data and customize integrations	View Overview View Explore > Traffic, Accounts, Reports, and Custom Dashboards View Policies > Traffic Policy Overview and Traffic Policy Settings View and manage Policies > Account Policies and List Management View Settings > Mitigation Settings > Challenge Settings and Precheck Settings and Settings > Data Export View and manage Settings > Mitigation Settings > Custom Action Settings and Custom Action Overview Update an Account status Developer and integration capabilities
Analyst Explore, investigate, and manage data	View Overview View and manage Explore > Traffic, Accounts, Reports, and Custom Dashboards View and manage Policies > Traffic Policy Overview, Traffic Policy Settings, Account Policies and List Management View Settings > Mitigation Settings > Challenge Settings and Precheck Settings and Settings > Data Export View and manage Settings > Mitigation Settings > Custom Action Settings and Custom Action Overview Update an Account status Developer and integration capabilities Exonerate users
Admin Full access to all settings and pages	View Overview View and manage Explore > Traffic, Accounts, Reports, and Custom Dashboards View and manage Policies > Traffic Policy Overview, Traffic Policy Settings, Account Policies and List Management View and manage Settings > Mitigation Settings and Data Export Update an Account status Developer and integration capabilities Exonerate users Activate or disable an application Configure and manage data exports

Platforms

Name	Permissions
Viewer Explore and investigate data	View account information in Platform Settings > Account View users in Platform Settings > User management View roles in Platform Settings > Permissions View account usage history in Platform Settings > Usage View Enforcer configurations in Platform Settings > Enforcers
Application Owner Manage application settings	View and manage account information in Platform Settings > Account View users in Platform Settings > User management View roles in Platform Settings > Permissions Configure SSO authentication methods in Platform Settings > Authentication View account usage history in Platform Settings > Usage View and manage page type mappings in Platform Settings > Page Type Mapping View Enforcer configurations in Platform Settings > Enforcers
IT/Devops Manage integrations	View account information in Platform Settings > Account View and invite users in Platform Settings > User management View and manage roles in Platform Settings > Permissions Configure SSO authentication methods in Platform Settings > Authentication View and manage integrations in Platform Settings > Integrations View Enforcer configurations in Platform Settings > Enforcers
User manager Manage user roles and access	View and invite users in Platform Settings > User management View and manage roles in Platform Settings > Permissions
Admin Full access to all settings and pages	View and manage account information in Platform Settings > Account View and invite users in Platform Settings > User management View and manage roles in Platform Settings > Permissions Configure SSO authentication methods in Platform Settings > Authentication View account usage history in Platform Settings > Usage View and manage integrations in Platform Settings > Integrations View and manage page type mappings in Platform Settings > Page Type Mapping View Enforcer configurations in Platform Settings > Enforcers

Enable an advanced role

Advanced roles are specialized roles designed for organizations that need more granular user controls beyond the default ones. Advanced roles need to be enabled per product.

Advanced roles are not available for all products.

Navigate to Platform settings > Permissions.
Select the product you want to enable advanced roles on.
Toggle on Advanced roles.

Confirm that you want to show advanced roles in the popup that appears.

Now, any available advanced roles will appear, and you can assign users those advanced roles. You can also create custom roles based on the advanced ones.

Create a custom role

If the default roles don’t meet your account’s needs, you can create custom roles with the permissions you’d like.

Navigate to Platform settings > Permissions.
Select the product you want to create a role for.
Select + Create role.

Enter a name for your role and select an existing role to base the permissions off of. Then, click Start.
Select each permission you’d like to enable or disable for this role.
Click Save changes.

Your new role will appear under Custom roles. You can always edit or delete a role by hovering over it and selecting the corresponding option .