Creating custom roles
Build your own role from AssetTrove's individual permissions when the built-in roles don't fit.
If none of the built-in roles fits, create a custom role and pick exactly the permissions it should have. You need permission to manage roles (Owners and Admins have it).
Permissions you can choose from
| Area | Permissions |
|---|---|
| Organisation | View settings, update settings, billing |
| People | View people, manage people, manage roles, manage SCIM tokens, manage API keys |
| Hardware | View, create, update, delete, assign/return/transfer, retire/dispose |
| Finance | View costs and depreciation, edit depreciation and close periods |
| Discovery | View, configure sources, send discovery data, resolve match conflicts |
| Software | View the catalogue, manage the catalogue and title rules |
| Licences | View, manage contracts and entitlements, allocate licences |
| Reconciliation | Run, view |
| Reclamation | View, manage policies, approve reclaims |
| Compliance | View, manage frameworks, mappings and evidence |
| Audit | View the audit log, export the audit log |
| Webhooks | Manage webhook endpoints |
| Self only | View only your own assets, view only your own licences |
Example: service desk
A service desk role that can hand out and collect laptops but not delete or dispose of them:
- Hardware: view, update, assign/return/transfer
- Discovery: view
- People: view
Combine it with a location scope for regional desks.
Good to know
- Disposing of an asset with a sale price also needs the finance edit permission, because it affects the books.
- If a permission is ever retired in a future release, it shows as deprecated on your custom role and is simply ignored.
Still have a question? Email rory@assettrove.eu and we'll get back to you.