Torii users with the Admin role can customize the permissions for new and existing users in your Torii account.

A role defines the access level (full access or read-only) for each scope.

Using Roles

All Torii users can view all of the data in Torii's console. You can use Torii roles to limit the actions users can take in Torii's console.

For example, you can use Torii roles to allow certain Torii users to update financial data without granting them access to modify Torii workflows.

Pre-defined Roles

There are two pre-defined roles within Torii that cannot be changed:

  1. Admin - has full access to all scope including the ability to create new roles, manage members and manage API keys

  2. Read-only - can view all data, but can't take any action

Custom Roles

Torii users with the Admin role can create custom roles. Custom roles define the access level (full access or read-only) for each scope.

Access Scopes

Settings

Update company general settings from Settings → General tab:

  • Company name

  • Outgoing email display name

  • Displayed currency

  • User lifecycle

  • Inactivity period

  • Sign out users on being idle

  • Extension mode

Public views

  • Create and edit applications and contracts public views

💡 Users will always have the ability to delete views that were created by them even if Public View permission is taken from them after the view was created.

Integrations

  • Connect, disconnect and sync integrations

Automation

  • Create, edit and update workflows

  • Start, stop and re-open employee offboarding

  • Update offboarding configuration

Applications

  • Update application info, state and owner

  • Hide and un-hide applications

  • Add custom applications

Contracts

  • Add, edit and delete contracts

License and chargeback

  • Update license costs

  • Configure chargeback

Expenses

  • Upload and delete expense files

  • Archive and unarchive transactions

  • Edit expense rules

Application Catalog

  • Enable and disable application catalog access

  • Configure application catalog settings

Did this answer your question?