What is a Permission Profile?
A Permission Profile is a reusable permission template scoped to a single application. Unlike a Package (which spans multiple apps), a profile bundles the permissions of one application into a named role. When a profile is updated, all assigned users receive the change at the next sync — without any manual re-provisioning.
can_publish = 1 and can_edit_own = 1. All users assigned this profile get both permissions, and if you later add can_schedule = 1 to the profile, they all get it automatically.Accessing profiles
- Open Manage Permissions and select the application.
- Click the Profile Definitions tab.
define_profiles meta-permission.Creating a profile
- Click New Profile.
- Provide a name (must be unique for this application) and an optional description.
- Set the value for each permission in the application. Permissions marked LOCKED are system-managed and cannot be included in profiles.
- Save. The profile is active immediately.
Assigning a profile to a user
- Go to the Assigned Users tab of the application.
- Click Assign Profile.
- Select the user and choose the profile. Optionally set a validity window (start and end date).
- Confirm. The system deactivates any previous profile assignment the user had for this application and activates the new one.
Editing a profile
Click the pencil icon on any profile row. Before saving, the system shows an Impact Analysis: how many users are affected and which permissions will change. This lets you review the consequences before committing.
Deleting a profile
Click the delete icon on the profile row. If users are currently assigned:
- Choose Delete only to revoke all assignments with no replacement.
- Choose Migrate users to move all current members to a different profile automatically.
Role Mining (suggested profiles)
If you have many users with identical manual permissions and no profile yet, the Role Mining tool (bottom of the Profiles tab) scans your active authorizations and suggests profiles based on clusters of users who share the same permission set. You can accept a suggestion and bulk-assign all matching users in one click.
