Skip to main content

Permissions troubleshooting

Troubleshooting common issues with permissions.

Use this page to diagnose and resolve common issues with permissions.

Why can't I delete a role?​

Default roles (such as Admin) cannot be deleted. These roles are created automatically when your organization is set up and are protected to ensure basic functionality.

Only custom roles that you've created can be deleted.

Can I assign roles to individual users?​

It depends on the role type:

  • Organization roles: Yes. Admins can assign an organization role directly to a user from their detail page in Settings > Users. Open the user, go to the Organization permissions tab, and click Add role. You can also assign roles to individual users via the Retool API.
  • Object roles (Enterprise): No. Object roles must be assigned to groups. To grant an object role's permissions to a single user, add them to a group that has the role assigned.

What happens if a user belongs to multiple groups with different roles?​

Users inherit the combined permissions of all roles assigned to their groups. Permissions are additive: if any group grants a permission, the user has that permission.

Example

If a user is in Group A (with Analytics Viewer role) and Group B (with Branding Manager role), they have both analytics viewing and branding management permissions.

Can I see which users have a specific permission?​

Yes. To see who has access through a role:

  1. Navigate to Settings > Roles.
  2. Select the role.
  3. Click the Assignments tab.
  4. Expand each group (click >) to view its members.

All members of assigned groups inherit the role's permissions.

I don't see object permissions in my settings​

Object permissions are managed through the Object permissions tab on the Groups and Users settings pages, and through object roles on the Roles page. If you don't see these options, check that your Retool instance is on a version that supports role-based object permissions.