---
title: "How to Add a New Role"
url: "https://dm0bkdes5q7a2ls.productfruits.help/en/article/user-management-how-to-add-a-new-role"
language: "en"
last_updated: "2026-01-12T16:49:25.226Z"
---

# How to Add a New Role

Use the following steps to add a new Role:

1.  From the left-side navigation menu select "Settings" at the bottom of the menu.
2.  Select "User Management" from the menu.
3.  The "User Management" page opens.
4.  Select the **USER ROLES** tab.
5.  In the top right of the screen, click the blue **+** **Add Role** button.  
      
    ![](https://docs.spirion.com/Content/Resources/Images/Assets/2.3%20Images/Users13_224x147.png)
6.  The "Create New Role" page opens.  
      
    **Note**: By default, all users assigned to a **custom** role have access to the following Spirion Sensitive Data Platform **pages** (pages only):
7.  -   SPIglass™ Dashboard
    -   Data Asset Inventory (including the SDV3 dashboard, Targets, and Tags)
    -   Agent Management
    -   Scans
    -   Playbooks
    -   Reports
8.  Specific Spirion Sensitive Data Platform objects, such as specific Agents, Targets, Tags, Scans, Playbooks, or Reports. These objects are accessed and/or managed by users as set by the role they are a member of (role-based access control). The objects the User Role can access can be configured after the role is created.  
      
    **IMPORTANT!** By default, user access to all Tags, Targets, Scans, Playbooks, and Reports is **denied** (excluding to those objects the user created before being assigned to their role).
9.  On the **Create New Role** page, complete the following:
10.  1.  Type a name in the **Role Name** box.  
           
         ![](https://docs.spirion.com/Content/Resources/Images/Assets/Users/User%20Roles%206_658x357.jpg)  
         **Note**: User Role names must be unique.  
         ![](https://docs.spirion.com/Content/Resources/Images/Assets/Users/User%20Roles%203_780x214.jpg)
     2.  Select the appropriate access for each Area shown - **View** and **Manage**.  
           
         ![](https://docs.spirion.com/Content/Resources/Images/Assets/Users/User%20Roles%204_698x402.jpg)  
         **Note**: Custom roles do not have access to existing scans, playbooks, or reports by default. Permissions to **Read** or **Manage** these resources are handled in the subsequent step.
11.  Click the blue **Review** button.
12.  The **Verify New Role Configuration** pop-up window opens.
13.  Review the permissions you have granted for the new role.  
       
     ![](https://docs.spirion.com/Content/Resources/Images/Assets/Users/User%20Roles%205_545x292.jpg)
14.  Click the **Confirm** button to create the new role or click the **Cancel** button to discard your changes.
15.  On the **TAGS / TARGETS** tab, select any relevant tag groups or targets for the role.  
     Select either of the following options:
16.  -   All Targets
     -   Custom tag (which is **Inherited** by default)  
           
         ![](https://docs.spirion.com/Content/Resources/Images/Assets/Users/User%20Roles%208_339x445.jpg)
17.  From the kebab menu at the right of the desired Tag or Target, select **Edit Permissions**.  
       
     ![](https://docs.spirion.com/Content/Resources/Images/Assets/Users/User%20Roles%209_589x288.jpg)
18.  In the **Edit Tag Permissions** pop-up window controls, select from the following:
19.  -   Partial or full visibility of matches against the Tag or Target.
     -   Whether users can add Targets or create nested Tags when working with manual Tag types.
     -   Enables **Modify** access to be assigned to edit target details  
           
         ![](https://docs.spirion.com/Content/Resources/Images/Assets/Users/User%20Roles%2011_479x335.jpg)
20.  Click the **Confirm** button to save the settings or the **Cancel** button to discard.
21.  From the top of the page select the **SCANS** tab.
22.  Select which scan(s) the role can access.
23.  1.  As previously stated above, **Read** access enables scans to be executed from the kebab menu from the Scans table on the Scan page (Scans > All Scans).
     2.  Select from:
     3.  -   **None**
         -   **Read**
         -   **Manage**  
               
             ![](https://docs.spirion.com/Content/Resources/Images/Assets/Users/User%20Roles%2012_630x367.jpg)
24.  From the Playbooks tab, select which playbook(s) should be accessible to the role.
25.  As previously stated above, **Read** enables playbooks to be selected during the scan creation process (if authorized to create scans).
26.  Select from:
27.  -   **None**
     -   **Read**
     -   **Manage**  
           
         ![](https://docs.spirion.com/Content/Resources/Images/Assets/Users/User%20Roles%2013_614x325.jpg)  
         **Note**: The Playbook Override option controls whether a role is authorized to perform user-level remediation against the specified Target(s).
28.  From the Reports tab, select which report(s) should be accessible to the role.
29.  1.  Select one of the following:
     2.  -   **None**
         -   **Read**
         -   **Manage**  
               
             ![](https://docs.spirion.com/Content/Resources/Images/Assets/Users/User%20Roles%2014_594x325.jpg)  
             **Note**: Reports with **Read** access can be viewed in the console only and exporting is not allowed.