🔐 Custom Collaborator Roles: give every team exactly the access it needs

As your Device Management setup grows across regions, countries, and stores, so does the number of people who need access to the Dashboard. Until now, every Segment permission came down to three choices: Admin, Editor, or Viewer.

That often meant choosing between two bad options. You could give someone full Admin access just because they needed one extra action in one place, or find workarounds to fill the gap. Neither is ideal when you're trying to keep access tight and your organization secure.

With Custom Collaborator Roles, you decide exactly which actions each person can take in Device Management.

🚀 How it works

Create a role once for your whole organization, pick the Dashboard actions it includes, and give it a name that matches the job, like Helpdesk, Store Admin, or Auditor. Then assign it to any Segment permission, the same way you assign built-in roles today.

The role defines what someone can do, and the Segment permission defines who gets it and where. Define a role once and reuse it across as many Segments as you need.

⚙️ Key Capabilities

• Custom roles built around real jobs: select exactly the actions each role needs, and give it a clear name and description.
• Start from what you already have: duplicate a built-in role or use an existing one as a template, then adjust it. The built-in Admin, Editor, and Viewer roles are still there, unchanged.
• Workspace and Device Management actions, clearly separated: every action belongs to the Workspace (W) or Device Management (M) group. W and M badges show at a glance what each role includes before you assign it.
• Built-in guardrails: Workspace actions only apply on the Global Segment. If you assign a role that includes them on a child Segment, the Dashboard warns you before you save.
• Protected Owner actions: sensitive actions like transferring ownership or deleting the workspace stay locked and can't be granted through any role.
• Predictable inheritance: permissions add up as you go down the Segment tree, so access in a child Segment always includes what's granted above it.

📌 Use Cases

• Helpdesk teams: let support agents handle day-to-day device tasks without touching organization settings.
• Store or site admins: give local teams the extra actions they need in their own Segment, and nothing beyond it.
• Auditors and compliance teams: create a role focused on visibility, tailored to what they need to review.
• Regional delegation: build one role per job and reuse it across every region, country, or store in your Segment tree.

📚 Learn more

• Custom Collaborator Roles.
• Segments.