Global Roles
A Global Role is a named set of permissions that defines what a user can do inside projects — for example, creating test cases, executing test runs, or viewing reports. It applies across all projects by default.
How Global Roles work
Each user has one Global Role assigned to them. That role applies to every project they are a member of, unless a Project Role Override is set for a specific project.
Global Roles contain only project-level permissions — things like managing test cases or viewing reports. They cannot grant admin panel access or tenant-wide capabilities. Those are controlled by Access Level.
The default role
Your workspace has one role marked as the default. Any new user who is invited without an explicit role selection will automatically receive the default role. Only one role can be the default at a time, and it cannot be deleted while it is set as default.
Managing roles
Global Roles are managed under Admin → Users → Roles & Permissions. From there you can:
- Create a new role with a custom name, description, and permission set
- Edit an existing role's permissions (changes apply to all users with that role immediately)
- Set a role as the workspace default
- Delete a role — users assigned to it are automatically moved to the default role
Available permissions by category
When building a role, you select from project-level permissions organised by module:
| Category | Example permissions |
|---|---|
| Test Cases | View, Create, Edit, Delete, Bulk Edit |
| Test Execution | View runs, Create runs, Execute tests, Review results, Delete runs |
| Folders | View, Manage |
| Analytics & Reports | View dashboard, View advanced reports |
| External References | View, Manage |
Admin permissions are not listed here. Permissions like Invite Users, Manage Roles, or Create Projects do not appear in the role editor — they are granted by Access Level, not by Global Roles. If you cannot find a permission in the role editor, it is likely a tenant-level permission.
Assigning a role to a user
A user's Global Role is set in two places:
- At invitation time — the invitation form includes a role selection field
- After joining — edit the user in Admin → Users → All Users and change the Global Role field
"If I change someone's Global Role, does it affect all their projects?" Yes — the Global Role is a workspace-wide default. Changing it updates what that person can do in every project where they do not have a Project Role Override set. Projects where an override is active are not affected. See Project Access & Overrides if you need per-project control.