How to grant, edit and revoke a manual permission

Before you start

Granting a permission

1. Open Manage Permissions and select the application.
2. If the app has more than one permission, click on the permission you want to grant.
3. On the permission detail page, click New Authorization.
4. In the modal, type the user's personal code or click Search User to find them by name.
5. The system immediately checks:
   • If the user is the Founder — manual grants are unnecessary and blocked.
   • If the user already has an active grant for this permission — a duplicate warning will appear.
   • If the user already receives this permission via a Profile — a profile overlap warning will appear (you can still proceed; the manual grant will take precedence).
6. Select the permission value (access level, structures, groups, etc.).
7. Optionally set a scope parameter (e.g., a specific structure for UOR-type permissions).
8. Optionally set Valid From and Valid Until dates.
9. Click Confirm. The permission is active immediately.

Editing a permission

1. Find the user in the Active Authorizations table.
2. Click the pencil button on their row.
3. Adjust the value or the validity dates. Note: the start date is read-only — it is preserved from the original grant to maintain an accurate audit trail. A new record is created internally for history.
4. Confirm. The change takes effect immediately.

Revoking a permission

1. Find the user in the Active Authorizations table.
2. Click the ban button on their row.
3. Confirm. The permission is deactivated immediately and moves to the Inactive tab.

Restoring a revoked permission

Switch to the Inactive / History tab. Find the revoked record and click Restore. You can optionally set a new validity window for the restored grant. A new active record is created — the old revoked record is kept for auditing.