Give a member a role in a tenant and revoke it

Prerequisite

• role.write in the tenant (role.read to see).
• The person getting the role must be a member of this tenant. Making someone a member needs membership.write and is done on the Members screen.

Steps

1. In the tenant scope, open Roles under People and access. With no role chosen in the list, the grant form is on the right.
2. Type the email in the Email of a member in this tenant field.
3. Pick the archetype from the Role list.
4. Press Grant role in this tenant.

Revoking

1. In the assignments list (or on the role's own view, after choosing it in the list), press Revoke next to the assignment.
2. In the “Revoke role assignment?” confirmation, read how many keys will be dropped and confirm. A revoked assignment is not kept on record; it is deleted.

Good to know

• Only assignments given in this tenant's own scope are here. A role given in the account or on the platform also works in this tenant; the Access screen shows those, and they are revoked in the scope they were given in.
• If the person already has the same role, no new assignment is created.
• The Member archetype can be held only in the tenant scope.