Roles and Permissions

Creating and assigning roles

Roles live under Roles & Rechte (Roles & Permissions) in the sidebar. Anyone with the manage_roles permission (or the owner) can:

• Create a new role with a name and color

• Pick which permissions it grants

• Assign it to one or more members

A member can have several roles at once. If any of their roles grants a permission, they have it - permissions are additive, there's no "deny" that overrides a grant from another role.

What permissions exist

Permissions are grouped by area:

General

manage_roles, assign_roles, manage_modules, manage_members (kicking members from the team)

Organization

manage_calendar, manage_meetings, write_protocol (editing live meeting notes), manage_absences, confirm_absences, bypass_self_confirm

Communication

manage_announcements, manage_kummerkasten

Productivity

manage_boards, manage_notes, create_notes

Services

manage_status, view_status, read_github, manage_github, read_wiki, manage_wiki

Statistics

view_stats (your own ticket stats), view_all_stats (everyone's)

Most modules follow the same pattern: a read_*/view_* permission to see content, and a manage_* permission to create, edit or delete it. If a section only has one permission (like Boards or Absences), that single permission covers both reading and managing.

A practical starting point

For a small team, three roles usually cover it:

1. Owner/Admin - the * wildcard, for one or two trusted people.

2. Moderator - manage_members, manage_announcements, manage_kummerkasten, plus whatever specific manage permissions your moderators actually need day to day.

3. Member - just enough to read things (read_wiki, view_status, create_notes) without being able to change team-wide settings.

You can always come back and adjust roles later - changes apply immediately, no need to ask people to log out and back in.