Role Based Access Control

Roles are a set of permissions granted that are specific to the Team that the user is a member of. There are pre-defined Roles that can be directly assigned to the members of the Team. If one wants to define Custom Roles, that is also doable.

It is critical to thoroughly note that Roles are Team-specific, that is, Roles will allow you specific abilities for just that Team that you are a part of.

Default Types of Roles and Abilities

There are 4 different default Roles that can be assigned to a Team member in Incident Response. See below to understand what they are, along with their abilities.

1. Manage Teams

This Role will allow you to manage just this Team. The abilities are:

Entity	Abilities
Teams	read update delete

2. Admin

Entity	Abilities
Escalation Policies	create read update delete
Postmortems	create read update delete
Runbooks	create read update delete
Schedules	create read update delete
Services	create read update delete
SLOs	create read update delete
Squads	create read update delete
Status Pages	create read update delete
Team analytics	read
Webforms	create read update delete

3. User

Entity	Abilities
Escalation Policies	read update
Postmortems	read update
Runbooks	read update
Schedules	read update
Services	read update
SLOs	read update
Squads	read update
Status Pages	read update
Team analytics	read
Webforms	read update

4. Observer

Entity	Abilities
Escalation Policies	read
Postmortems	read
Runbooks	read
Schedules	read
Services	read
SLOs	read
Squads	read
Status Pages	read
Team analytics	read
Webforms	read

Manage Roles and Abilities

Follow the steps below to manage Roles for a Team:

1. Click on Settings in the sidebar



2. Click on Teams from the secondary navigation menu and select the Team you want to manage Roles and Access Controls for



3. Click on Roles from the horizontal menu and you will have the option to edit or delete the Roles and Access Controls via the More Option

Custom Roles

There might be situations where the predefined Roles and Abilities available for members of a Team in Incident Response, by default, are not sufficient or that they do not align with how you want your Team members to be organized (in terms of Access Controls).

In such situations, you can either choose to modify one of the default Roles itself or you can create Custom Roles to provide special, customised permissions to specific types of users in your Organization for that Team.

It is critical to thoroughly note that only members of the Team with Manage Team Role permissions can create and manage Custom Roles.

Creating a Custom Role

Follow the steps below to create a Custom Role for a Team:

1. Click on Settings in the sidebar



2. Click on Teams from the secondary navigation menu and select the Team for which you want to add the Custom Role



3. Click on Roles from the horizontal menu and scroll down to the bottom of the page



4. Click on Add new team role. Here:

• Give the Custom Role a Name indicating the Role type

• Next, for the available Entities (Escalation Policies, Postmortems, Schedules, Services, Squads, Status Pages), select the Access Controls (read, create, update, delete)

5. Click on Save to create the new Custom Role for the Team