Manage App Roles & Permission Overrides

This page allows administrators to manage role-level permission overrides for a chosen business and application. Select the business and application from the dropdowns at the top of the page to load role panels (Admin, Standard, Basic and Custom). Each panel displays permission sections and checkboxes you can toggle to grant or revoke specific permissions for that role.

What you can do on this page

• 1. Select the Business you manage from the dropdown.
• 2. Select an App from the second dropdown to load role permission panels.
• 3. Expand role panels (Admin, Standard, Basic, Custom) to view sections and individual permissions.
• 4. Toggle the permission checkboxes to grant or revoke overrides for the selected role.
• 5. Changes are saved immediately via an AJAX call; a toast notification confirms the update.

Page layout

• Header — business and app selectors with automatic postback to load data.
• Info box — guidance about how the page works and that changes take effect on next sign-in.
• Role panels — tree-like boxes for Admin, Standard, Basic, and any Custom roles showing permissions grouped by section.
• Error panel — shows validation or server errors at the top of the page.

Typical flow

1. Select the organisation from Select Business and then pick the target application in App.
2. The page loads role panels for that application (Admin / Standard / Basic / Custom).
3. Locate the permission you want to change and toggle its checkbox.
4. An AJAX request is sent to AppRoles.aspx/UpdatePermissionOverride to persist the change.
5. A short toast confirms the update. The permission override is applied when users next sign in.

Important behaviour

• 1. The page saves changes immediately when a checkbox is toggled; there is no separate Save button.
• 2. Changes are role-specific and apply as an override for the selected application and business only.
• 3. Overrides may be applied at next sign-in — active sessions may not reflect the change immediately.
• 4. If no application is selected the permission panels remain hidden to avoid accidental edits.

AJAX & UI feedback

• 1. Permission toggles send a JSON POST to the server; successful responses show a toast message.
• 2. If the request fails the ErrorPanel displays details — check browser console for client-side errors.
• 3. The UI uses the .perm-checkbox class and data-permissionid/data-permissionname attributes to identify changes.

Troubleshooting

• 1. If checkboxes do not persist, confirm you have the required administrative permissions and the page has finished loading.
• 2. If toggles produce an error, review the Error Panel message and check server logs for permission update failures.
• 3. If a change appears not to take effect for a user, ask the user to sign out and sign back in to receive updated permissions.

Security & best practices

• 1. Limit permission overrides to authorised administrators only.
• 2. Prefer granting permissions at the appropriate role level rather than many per-user overrides.
• 3. Review role changes in audits and test changes with a non-production account where possible.

Notes

• Permission structure and available sections vary by application — some apps expose more granular permissions than others.
• Custom role panels may appear if the application supports site-specific role definitions.