Manage Tenant Permissions — Platform Admin

Overview

Platform Admins can create and manage permission groups for tenant users. Permission groups define what actions a tenant user is allowed to perform within their tenant's dashboard. All permissions in tenant groups are Tenant-scoped — they never grant access to platform-level administration.

Permission Group Types

These two types are strictly separate. A tenant user may only be assigned Tenant permission groups.

Creating a Tenant Permission Group

1. Open Permissions from the dashboard navigation.
2. Click New Permission Group.
3. Set the group scope to Tenant.
4. Enter a name for the group (e.g. "Survey Manager", "Report Viewer").
5. Select the individual permissions to include.
6. Choose which tenant(s) this group applies to, or mark it as a shared template.
7. Click Save Group.

Assigning a Permission Group to a User

1. Navigate to Tenant Users and select the target user.
2. Click Assign Permission Group.
3. Select one or more permission groups for the user.
4. Click Save.

Changes take effect on the user's next page load or on their next session start.

Removing a Permission Group

1. Navigate to the user's profile.
2. Click the × next to the permission group to remove.
3. Confirm the removal.

Important Rules

• Do not assign System permission groups to tenant users.
• Do not add System permissions into Tenant permission groups.
• Do not add integration API-key scopes into standard Tenant or System permission groups.
• A user with no permission groups assigned can log in but sees very limited functionality.
• Tenant Admins can assign permission groups from their own dashboard, but are limited to groups that belong to their tenant.