Roles

Roles allows administrators to create comprehensive user access profiles that combine permissions, authorization ranges, resource assignments, and module-specific access rights. Beyond basic security permissions, roles control authorization limits for tasks and purchases, access to bookable locations and buildings, document repositories, published reports, and module functionality, enabling complete user experience management through standardized role-based configurations.

Settings > User Accounts > Roles
or
Settings > System Administration > User Accounts & Security > Roles

The link will open the Roles grid. It is a grid view which can be searched, sorted and customised as normal.

To add a new Role click New , to edit an existing Role click Edit . A pop up window will appear which will allow the creation or amendment of a Role.

Click to view - Roles Fields and Descriptions

Field Name	Description
Code	A short, unique alphanumeric identifier for this role that defines a specific set of system permissions and functional access rights (e.g., "ADMIN", "FM-MGR", "TECH", "VIEWER"). Roles are building blocks combined within Account Profiles to create comprehensive permission sets. Each role code represents specific capabilities like "Can Create Tasks", "Can Approve Purchase Orders", "Can Modify Assets", enabling granular security configuration. Multiple roles can be assigned to a single account profile to grant combined permissions. Use consistent, meaningful codes that clearly indicate the permission scope. This code appears in security reports, permission audits, and integration exports. Once assigned to profiles, avoid changing to maintain security configuration integrity.
Description	The description of the Role.

Complete the fields and click Save . Once the Role Header has been completed and saved sub navigations will appear to allow additional entities to be assigned.

Permissions Sub Navigation

Click to view more detail.

Once the Role header has been completed, the Role must have their Permissions, also known as Securables, defined.

Permissions/Securables set against the Role control the access of the User Accounts assigned with the Role to areas of MRI Evolution and what actions they can carry out within those areas.

Permissions are organised by function or system entity into Securable Groups. MRI Evolution's suite of web services have their own set of Securables within the relevant Securable Groups.

Settings > Accounts > Roles

From the drop downs select the required Securable Group and where applicable the Database, check the appropriate boxes to reflect the desired Permissions for the User Accounts assigned with the Role within MRI Evolution. Users will inherit the Securables defined against the assigned Role when logging in.

Securables need to be set for each Securable Group in turn.

A Permission can be set to allow or deny a User Account as follows:

Create: Inserting new records
Read: Viewing data, but not changing it
Update: Editing existing records
Delete: Removing records
Allow: A specified Action is allowed or denied, such as "Change Asset Status"

All Permissions have three toggle-able settings, in the following sequence:

Checked : The option is available to the Role's associated Users, unless overridden by the same Permission set to Crossed for a specific User
Crossed : The option is denied and not available to the Role's associated Users, even if it has been set as Checked for a specific User
Blank : The option is not available to the Role's associated Users, unless overridden by the same Permission set to Checked for a specific User

Setting Securables within a Securable Group

Clicking the Securable hyper-link, highlighted below, will toggle every Securable in the Securable Group to the next setting in the sequence.

Clicking a column heading, such as the Create hyper-link below, will toggle every Create Securable in the Securable Group to the next setting in the sequence.

Clicking a row heading, such as the "Asset Assignment" hyper-link below, will toggle every Securable in the row to the next setting in the sequence.

Clicking an individual Securable box, such as the Update below, will toggle the value to the next setting in the sequence.

Clicking the Assign All Permissions toolbar button will check every Securable in every Securable Group - It may not be advisable to use this since it grants full access to every area of MRI Evolution.

MRI Evolution takes into account all Permissions defined for a User. These could be set directly against their User Account or inherited from any Roles assigned to their account.

Additional Icons	Name	Description
	Copy	Available from 6.1.2.0 Click to make a copy of the existing Role. All Role configuration information will be copied with the exception of the assignment of Roles to Accounts.
	Assign All Permissions	Checks all Account Permissions for every Securable Group. Available from 5.7.0.0 The user will be prompted to confirm they want to do this prior to assigning all Permissions: "Are you sure you want to apply all Permissions to this Account or Role?"
	Roll Permissions Report	Click to run the AC-002 Roles Permissions report for the current Role record.

Additional Icons

Name

Description

Copy

Available from 6.1.2.0

Click to make a copy of the existing Role.

All Role configuration information will be copied with the exception of the assignment of Roles to Accounts.

Assign All Permissions

Checks all Account Permissions for every Securable Group.

Available from 5.7.0.0

The user will be prompted to confirm they want to do this prior to assigning all Permissions:

"Are you sure you want to apply all Permissions to this Account or Role?"

Roll Permissions Report

Click to run the AC-002 Roles Permissions report for the current Role record.

Other Assignments