In Cenedril you set up granular access control by opening the Access Control tab under Team, activating the feature, creating custom roles with the permissions you want in the Roles section, and assigning them to individual people in the User assignments table. Access control is an additive layer on top of the Owner, Admin and User account roles. Every change is logged in the History.
Activate access control
Open the Access Control tab
In the sidebar open Team and select the Access Control tab at the top. This tab is available to companies on the Pro plan. Without Pro, the tab leads to the plan selection.
Activate the feature
While access control is not yet active, the page explains how it works. Read the notes and click Activate now. On first activation, every existing user automatically receives the Godmode role with full access, so no one is locked out.
Create custom roles
Create a new role
In the Roles section you see the built-in roles (marked Standard) and the Godmode role. Click New role at the top right to create your own.
Set name, description and permissions
In the dialog give the role a Name (for example “DPO” or “ISMS Auditor”) and an optional Description. In the Permissions section you set the level per feature, wizard, record or policy: No access, Read, Edit or Approve. The summary at the top always shows how many areas sit at which level.
Save the role
Click Save. The new role then appears in the list, initially with zero assigned users. The Godmode role can only be viewed, since it holds all permissions and is immutable.
Assign roles
Open user assignments
The User assignments section shows one row per person. The Account role column shows the existing assignment (Owner, Admin or User), and the Additional roles column shows the granular roles.
Add or remove a role
In a person’s row, click Assign role and pick the role you want from the dropdown. It then appears as a chip in the Additional roles column. Use the ✕ on a chip to remove an assignment again. Multiple roles per person are allowed, and the permissions add up.
Track changes
Review the history
At the bottom of the tab, expand the History section using Show. It lists every change chronologically: activation, roles created and updated, permissions added or removed, and roles granted or revoked, each with a timestamp and the person who made the change.
Result: access control is active, your custom role is created and assigned to at least one person, and the history documents every one of these steps in an audit-proof form.