How do roles and permissions work?

Introduction

Implio features a granular permission model with preset roles controlling which parts of Implio users are able to access, and what actions they are able to perform.

Roles are set at a per-team level. Users who are part of multiple teams may have different roles for each team.

User roles and permissions

Implio currently supports the following roles: Admin, Automation specialist, Moderator and Spectator.

The initial user creating a new Implio team is the team Admin and can perform any action, including manage team members.

The table below indicates the actions each role is able to perform:

Permissions / Roles Admin Automation Specialist Moderator Spectator
See statistics



Moderate items



View/search moderated items




Manage rules and lists




Import items with CSV importer




Delete items



Manage team and API settings




Manage team members




Setting roles for your team members

Users and their roles can be managed by going to the Settings > Team Settings > Team Members section.

Only users with Admin role can access this section and manage users.

Setting the role of a new team member

When inviting a user to join Implio, a role has to be assigned to this new user:

Changing the role of an existing team member

The role of an existing team member can be changed at any time by selecting a new value in the drop-down menu:

It is worth noting that Admin team members can't change their own role, but other Admin team members can.

Revoking access to a team

Access to a team can be revoked at any time by change the user's role to No access:

This will prevent further access to the team. Note that users disabled in a team will still be able to access other teams they are part unless their access has also been revoked there.

This operation can be reverted by picking a new role for the user, allowing team access to be temporarily suspended.

Access can also be changed or revoked for users who have been invited but have not confirmed the invitation yet:

Best practices

  • Only invite users who you trust with your team's contents.
  • Email addresses used for registering users should be personal and not shared by multiple individuals.
  • Grant new users the lowest possible role based on the actions they need to perform. In particular, only grant the Admin role to users who absolutely need to manage your team. Automation specialist role should be enough for most team members.
  • Be sure to revoke team access for employees who have left your company or who don't need to access the team anymore.

Was this article helpful?

Can’t find what you’re looking for?

We are here to help! Click that big button or chat bubble to get in touch with our support team ➡