Roles, Permissions & Users

This is what turns a single-admin app into something a whole team or customer base can use safely — who can see what, who can change what, and what a brand-new sign-up is allowed to do on day one.

1. Add a user profile collection

Role-based access needs a collection that represents "a person" — with name, email, and role fields. If your schema doesn't have one yet, the Schema Builder shows a one-click button for it (Add User Profile collection, or Seed User Profile if your schema is empty). This adds a ready-made collection with those fields already in place — you don't build this one by hand.

You can add your own extra fields to it too (age, department, phone number — anything about a person), the same way you'd add a field to any other collection. Note that name, email, and role themselves can't be deleted or renamed — the rest of the app depends on them.

2. Open Roles & Permissions

This page shows one card per role, and a permissions matrix per collection:

Column	Meaning
Full	Unrestricted access — view, create, update, and delete, all at once
View	Can see records in this collection
Create	Can add new records
Update	Can edit existing records
Delete	Can remove records

There's always an admin role, reserved and unrestricted — it can't be renamed, deleted, or have its permissions unchecked.

Click New Role to add another (support staff, sales, viewer — whatever fits your app), tick the boxes for what it can do in each collection, and click Save & Apply. Changes take effect immediately.

3. Set the default role for sign-ups

Next to each non-admin role, there's a Default on register option. Whichever role you pick here is the one automatically assigned to anyone who signs up through the app's own registration form — nobody chooses their own role, and nothing they submit can override this. If you skip this step, your app's dashboard will show a reminder before you share it.

4. Manage individual users

The Users page lists everyone who has signed up. From here you can:

• Change anyone's role at any time, directly from the dropdown in their row.
• Add a user yourself — click Add User, enter their email, name, and role (plus any extra profile fields you've added). A temporary password is generated automatically and shown once, ready to copy and send to them.

Inviting people vs. open sign-up

In App Configuration, the Allow Registration toggle controls whether people can create their own account from the app's sign-up screen at all. Turn it off for an invite-only app, where every account is created by you from the Users page instead.