# Project roles

**Roles** option enables the following functionality:

- To control which group or user is assigned to perform a specific step in the workflow;
- To control who can navigate the project's menu items;
- To set Apptimized email notifications (i.e., which users will receive the email notifications).

Once the workflow reaches a specific step, the assignment rules will ensure that the task is assigned to the correct group of users (or a user). This will prevent from performing actions by unauthorized users.

<p class="callout info">The project administrator role appears as an initial default role after the project was created.   
Project administrators can perform any workflow action.</p>

<p class="callout info">To complete the tasks with role assignments, a user must be a Project administrator or must have permission for these activities.</p>

### Create a role

The option to create a role with needed permissions is available under **Roles** in project settings (**Project** menu &gt; **Administration** &gt; **Roles**).

[![image.png](https://docs.apptimized.com/uploads/images/gallery/2025-11/scaled-1680-/tOKimage.png)](https://docs.apptimized.com/uploads/images/gallery/2025-11/tOKimage.png)

Apptimized opens the following screen:

[![image.png](https://docs.apptimized.com/uploads/images/gallery/2025-11/scaled-1680-/gl8image.png)](https://docs.apptimized.com/uploads/images/gallery/2025-11/gl8image.png)

The option to create a new role is available under the **Add new role** button:

[![image.png](https://docs.apptimized.com/uploads/images/gallery/2025-11/scaled-1680-/Wl9image.png)](https://docs.apptimized.com/uploads/images/gallery/2025-11/Wl9image.png)

Apptimized shows the following modal window when successful:

[![Add new role.png](https://docs.apptimized.com/uploads/images/gallery/2026-02/scaled-1680-/add-new-role.png)](https://docs.apptimized.com/uploads/images/gallery/2026-02/add-new-role.png)

<span style="font-size: 12.0pt; line-height: 115%; font-family: 'Aptos',sans-serif; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: Aptos; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin; mso-bidi-font-family: 'Times New Roman'; mso-bidi-theme-font: minor-bidi; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA;">The new role requires its name, project, workflow and updates permissions. All required fields are marked with an asterisk</span> <span style="color: #ff0000;">\*</span>.

[![Add new role pick.png](https://docs.apptimized.com/uploads/images/gallery/2026-02/scaled-1680-/2vTadd-new-role-pick.png)](https://docs.apptimized.com/uploads/images/gallery/2026-02/2vTadd-new-role-pick.png)

Table 1. Role attributes

<table border="1" id="bkmrk-attribute-descriptio" style="border-collapse: collapse; width: 100%; height: 1343.75px;"><tbody><tr style="height: 29.8333px;"><td style="width: 34.322%; height: 29.8333px;">**Attribute**</td><td style="width: 65.6647%; height: 29.8333px;">**Description** </td></tr><tr style="height: 29.8333px;"><td colspan="2" style="width: 99.9868%; height: 29.8333px;">**Project permissions**</td></tr><tr style="height: 29.8333px;"><td style="width: 34.322%; height: 29.8333px;">Dashboards</td><td style="width: 65.6647%; height: 29.8333px;">This attribute provides access to the project dashboard.</td></tr><tr style="height: 29.8333px;"><td style="width: 34.322%; height: 29.8333px;">Access to all apps</td><td style="width: 65.6647%; height: 29.8333px;"><span class="TextRun SCXW154657668 BCX8" data-contrast="none" lang="RU-RU" xml:lang="RU-RU"><span class="NormalTextRun SpellingErrorV2 SpellingErrorHighlight SCXW154657668 BCX8">This</span> <span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">attribute</span> <span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">providees</span> <span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">access</span> <span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">to</span> <span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">all</span> <span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">apps</span> <span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">if</span> <span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">the</span> </span>**<span class="TextRun SCXW154657668 BCX8" data-contrast="none" lang="RU-RU" xml:lang="RU-RU"><span class="NormalTextRun SCXW154657668 BCX8">Application </span><span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">owner</span></span>**<span class="TextRun SCXW154657668 BCX8" data-contrast="none" lang="RU-RU" xml:lang="RU-RU"> <span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">field</span> <span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">is</span> <span class="NormalTextRun SpellingErrorV2 SCXW154657668 BCX8">enabled</span><span class="NormalTextRun SCXW154657668 BCX8">.</span></span><span class="EOP SCXW154657668 BCX8" data-ccp-props="{"201341983":0,"335559740":259}"> </span></td></tr><tr style="height: 29.8333px;"><td style="width: 34.322%; height: 29.8333px;">Roles</td><td style="width: 65.6647%; height: 29.8333px;">This attribute provides access to perform role management activities for the project.</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">Groups and users</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides access to perform management activities with groups and users for the project.</td></tr><tr aria-rowindex="1" style="height: 46.6667px;"><td data-celllook="0" style="width: 34.322%; height: 46.6667px;"><span data-contrast="none">File Storage</span><span data-ccp-props="{"201341983":0,"335559740":259}"> </span>

</td><td data-celllook="0" style="width: 65.6647%; height: 46.6667px;"><span data-contrast="none">This attribute provides access to a dedicated/separate file storage to which the user can upload files for later use.</span>

</td></tr><tr aria-rowindex="3" style="height: 46.6667px;"><td data-celllook="0" style="width: 34.322%; height: 46.6667px;"><span data-contrast="none">Echo “assisted”</span><span data-ccp-props="{"201341983":0,"335559740":259}"> </span>

</td><td data-celllook="0" style="width: 65.6647%; height: 46.6667px;"><span data-contrast="none">This attribute provides access to assisted Echo playback for interactive sessions such as Discovery and Testing.</span>

</td></tr><tr aria-rowindex="4" style="height: 46.6667px;"><td data-celllook="0" style="width: 34.322%; height: 46.6667px;"><span data-contrast="none">Echo Testing</span><span data-ccp-props="{"201341983":0,"335559740":259}"> </span>

</td><td data-celllook="0" style="width: 65.6647%; height: 46.6667px;"><span data-contrast="none">This attribute provides test automation capabilities: record the user’s test case and play it back automatically when needed.</span>

</td></tr><tr aria-rowindex="5" style="height: 46.6667px;"><td data-celllook="0" style="width: 34.322%; height: 46.6667px;"><span data-contrast="none">Echo platforms</span><span data-ccp-props="{"201341983":0,"335559740":259}"> </span>

</td><td data-celllook="0" style="width: 65.6647%; height: 46.6667px;"><span data-contrast="none">This attribute provides the ability to add and remove Echo platforms in project on Echo statistics page.</span>

</td></tr><tr aria-rowindex="6" style="height: 46.6667px;"><td data-celllook="0" style="width: 34.322%; height: 46.6667px;"><span data-contrast="none">Echo applications</span><span data-ccp-props="{"201341983":0,"335559740":259}"> </span>

</td><td data-celllook="0" style="width: 65.6647%; height: 46.6667px;"><span data-contrast="none">This attribute provides abilities to check applications for new Echo platform and approve new Echo platform in Project on Echo statistics page.</span>

</td></tr><tr aria-rowindex="7" style="height: 46.6667px;"><td data-celllook="0" style="width: 34.322%; height: 46.6667px;"><span data-contrast="none">Catalogue</span><span data-ccp-props="{"201341983":0,"335559740":259}"> </span>

</td><td data-celllook="0" style="width: 65.6647%; height: 46.6667px;"><span data-contrast="none">This attribute provides access to latest version of the application which was packaged with a standard guide and ready for use.</span>

</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">SCCM</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides access to perform SCCM activities within the project.

The option becomes active when SCCM is enabled for the project.

</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">Intune</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides access to perform Intune activities within the project.

The option becomes active when Intune is enabled for the project.

</td></tr><tr aria-rowindex="1" style="height: 29.8333px;"><td data-celllook="0" style="width: 34.322%; height: 29.8333px;">Notifications

</td><td data-celllook="0" style="width: 65.6647%; height: 29.8333px;"><span data-ccp-props="{"201341983":0,"335559740":259}">This attribute provides access to project notification settings. </span>

</td></tr><tr aria-rowindex="2" style="height: 29.8333px;"><td data-celllook="0" style="width: 34.322%; height: 29.8333px;">Care

</td><td data-celllook="0" style="width: 65.6647%; height: 29.8333px;">This attribute provides access to Apptimized Care functionality within the project.

</td></tr><tr aria-rowindex="3" style="height: 46.6667px;"><td data-celllook="0" style="width: 34.322%; height: 46.6667px;">Customiz3r

</td><td data-celllook="0" style="width: 65.6647%; height: 46.6667px;">This attribute allows access to receive custom packages from the Care service.  
The option becomes available when Care is selected for the role.

</td></tr><tr style="height: 29.8333px;"><td colspan="2" style="width: 99.9868%; height: 29.8333px;">**Workflow permissions**</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">Import</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides access to perform activities on the **Import** step of the project's workflow.</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">Discovery Self Service</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides access to perform activities on the **Discovery - Self Service** step of the project's workflow.</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">Discovery Factory Service</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides access to perform activities on the **Discovery - Factory Service** step of the project's workflow.</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">Packaging Self Service</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides access to perform activities on the **Packaging - Self Service step** of the project's workflow.</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">Packaging Factory Service</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides access to perform activities on the **Packaging Factory Service** step of the project's workflow.</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">Testing Self Service</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides access to perform activities on the **Testing - Self Service step** of the project's workflow.</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">Download</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides access to perform the **Download** step in the workflow.</td></tr><tr style="height: 30.8333px;"><td colspan="2" style="width: 99.9868%; height: 30.8333px;">**Updates**</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">View</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides view access to the Updates feature of Apptimized.</td></tr><tr style="height: 46.6667px;"><td style="width: 34.322%; height: 46.6667px;">Modify</td><td style="width: 65.6647%; height: 46.6667px;">This attribute provides permissions to operate with updates, including tracking, editing, and processing.</td></tr><tr style="height: 46.4722px;"><td style="width: 34.322%; height: 46.4722px;">Emails</td><td style="width: 65.6647%; height: 46.4722px;">This attribute enables receiving e-mail notifications about updates.  
The option becomes available when Notifications is selected for the role.  
</td></tr><tr style="height: 35.2778px;"><td colspan="2" style="height: 35.2778px; width: 99.9868%;">**File Storage** (available if the [Storage](https://docs.apptimized.com/link/242#bkmrk-storage) feature is enabled in the project settings)  
</td></tr><tr style="height: 46.4722px;"><td style="width: 34.322%; height: 46.4722px;">Full control</td><td style="width: 65.6647%; height: 46.4722px;">This attribute provides permissions to download, upload, and remove files and directories in project storage.</td></tr><tr style="height: 29.6806px;"><td style="width: 34.322%; height: 29.6806px;">Upload</td><td style="width: 65.6647%; height: 29.6806px;">This attribute provides permission to upload files and create directories in project storage.</td></tr><tr style="height: 29.6806px;"><td style="width: 34.322%; height: 29.6806px;">Download</td><td style="width: 65.6647%; height: 29.6806px;">This attribute provides permission to access, view, and download content from project storage.</td></tr></tbody></table>

Apptimized shows the following notification and screen when successful:

[![image.png](https://docs.apptimized.com/uploads/images/gallery/2025-11/scaled-1680-/7Oyimage.png)](https://docs.apptimized.com/uploads/images/gallery/2025-11/7Oyimage.png)

### **Manage a role**

Users can be added to the role via the **Update users** or **Update groups** buttons.

[![image.png](https://docs.apptimized.com/uploads/images/gallery/2025-11/scaled-1680-/AAiimage.png)](https://docs.apptimized.com/uploads/images/gallery/2025-11/AAiimage.png)

[![image.png](https://docs.apptimized.com/uploads/images/gallery/2025-11/scaled-1680-/FUBimage.png)](https://docs.apptimized.com/uploads/images/gallery/2025-11/FUBimage.png)

A user or group can be selected on the following screens. The Save button applies the changes.

[![image.png](https://docs.apptimized.com/uploads/images/gallery/2025-11/scaled-1680-/Pycimage.png)](https://docs.apptimized.com/uploads/images/gallery/2025-11/Pycimage.png)

[![image.png](https://docs.apptimized.com/uploads/images/gallery/2025-11/scaled-1680-/YSTimage.png)](https://docs.apptimized.com/uploads/images/gallery/2025-11/YSTimage.png)

The **Edit** button allows modifying an existing role. The same steps apply as when adding a new role.

[![image.png](https://docs.apptimized.com/uploads/images/gallery/2025-11/scaled-1680-/zNKimage.png)](https://docs.apptimized.com/uploads/images/gallery/2025-11/zNKimage.png)

[![Edit Role 1.png](https://docs.apptimized.com/uploads/images/gallery/2026-02/scaled-1680-/edit-role-1.png)](https://docs.apptimized.com/uploads/images/gallery/2026-02/edit-role-1.png)

The role can be removed by selecting the **Delete** button and confirming the action.

[![image.png](https://docs.apptimized.com/uploads/images/gallery/2025-11/scaled-1680-/uX5image.png)](https://docs.apptimized.com/uploads/images/gallery/2025-11/uX5image.png)

[![image.png](https://docs.apptimized.com/uploads/images/gallery/2025-11/scaled-1680-/1xVimage.png)](https://docs.apptimized.com/uploads/images/gallery/2025-11/1xVimage.png)