Profiles and rights
Manage application profiles and rights to control access to features.
Profiles and rights
A Profile is a set of rights that you assign to a user to give them access to specific features of an application. Rather than configuring each user one by one, you create profiles (e.g., "Billing manager", "Auditor") and assign them.
When do you use this section?
- You want to create a new profile for a group of users with the same access needs
- You want to modify the rights of an existing profile
- You need to assign a profile to a user
Accessing the profile list
From the main menu on the left, click Applications then Profiles.
The list shows, for each profile: its name, its description, and the application it belongs to. Profiles marked System are created automatically by the platform and cannot be modified.
Creating a profile
- Click + New profile at the top right.
- General tab: enter the profile's name, a description, and select the relevant application (locked once editing).
- Still in the General tab: select the available environments for this profile (prod / staging / dev, at least one required). A profile can cover several environments.
- AppRights tab: check the rights to include in this profile (see below).
- Click Create.
Available rights
The AppRights tab displays a list of checkboxes specific to the selected application — it is not fixed: some rights correspond to broad legacy categories, others are fine-grained rights defined application by application. The legacy categories (still used by some applications) are:
| Right | What it allows |
|---|---|
| Configuration | Access the application's settings and configuration |
| Operations | Access operational tools |
| DPO | Access data protection tools (compliance, GDPR) |
| Audit | View activity logs |
| Billing | Access the billing and credits section |
| Cybersecurity | Access security tools |
| All rights | Full access to all features |
Beyond these categories, an application may declare finer-grained rights (for example limited to a specific resource). In that case, the displayed label comes directly from the right's definition on the platform side, not from this list.
[!WARNING] The environment filter displayed at the top of the profiles page determines the environment whose rights are loaded and modified in the AppRights tab — independently of the "available environments" list defined for the profile. If you manage a multi-environment profile, check the rights separately for each environment rather than assuming they are identical everywhere.
Modifying or deleting a profile
- Click the pencil icon to edit an existing profile.
- Click the trash icon to delete it. Users with this profile will lose the associated rights.
Profiles marked System cannot be modified or deleted.
Assigning a profile to a user
Assignment is done from the user's record, Profiles tab. You can add or remove profiles at any time; the effect is immediate.