> For the complete documentation index, see [llms.txt](https://help.verkada.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.verkada.com/command/users-and-permissions/roles-and-permissions-for-command/custom-roles.md).
# Custom Roles
Learn how to create, configure, and assign custom roles in Verkada Command
{% hint style="success" %}
Custom Roles replaces the legacy Customize Roles feature under **Admin > Users & Permissions**, now renamed to [Modify Default Roles](/command/users-and-permissions/roles-and-permissions-for-command/customize-roles-and-permissions.md). If your organization previously used Customize Roles to toggle permissions on standard roles, those settings remain unchanged. For new role customization, use the process described in this article.
{% endhint %}
Custom Roles let Organization Admins build roles from the ground up. Admins select only the permissions each user or group needs, helping organizations apply the principle of least privilege across teams, locations, and job functions.
***
## Create a Custom Role
{% hint style="danger" %}
You need Org Admin permissions to create and edit custom roles.
{% endhint %}
{% stepper %}
{% step %}
**In Verkada Command, go to All Products > Admin.**
{% endstep %}
{% step %}
**Under Admin > Users & Permissions, click Roles.**
{% endstep %}
{% step %}
**At the top right, click Create Custom Role.**
1. Enter a unique name for the role.
2. (Optional) Select a common template to copy permissions from.
3. Review the list of available permissions and toggle each one on or off based on what this role requires.
4. (Optional) Configure the role to apply site and directory permissions for all site(s) and directory(ies) across your organization.
{% hint style="danger" %}
This setting cannot be changed after a role is created.
{% endhint %}
5. At the top right, click **Create Role**.
{% endstep %}
{% endstepper %}
***
## Edit a Custom Role
You can edit an existing custom role at any time from Admin > Users & Permissions > Roles. Changes apply immediately to all users and groups assigned that role.
{% stepper %}
{% step %}
**In Verkada Command, go to All Products > Admin.**
{% endstep %}
{% step %}
**Under Admin > Users & Permissions, click Roles.**
{% endstep %}
{% step %}
**Select the role to edit.**
{% endstep %}
{% step %}
**Next to the role name, click Edit Permissions.**
Review the list of available permissions and toggle each one on or off based on what this role requires.
{% endstep %}
{% step %}
**In the top right, click Update Role.**
{% endstep %}
{% endstepper %}
***
## Assign a Custom Role
When picking a role type, find custom roles under the **Custom** section.
Users
#### Grant a custom role to a user
1. In Verkada Command, go to **All Products > Admin.**
2. Select **Users & Permissions** > **Users.**
3. Select a user to grant permissions.
* To assign a custom role that contains organization-level permissions, click **Manage** to the right of **Organization Roles.**
* To assign the custom role to a directory, click Manage to the right of **User Management Roles.**
* To assign custom roles to a site, click **Manage** to the right of **Site Roles.**
4. From the role types list, select **Custom.**
5. Select **Add,** then choose your custom role from the list, then click **Save**.
#### Revoke custom roles from a user
1. In Verkada Command, go to **All Products > Admin.**
2. Select **Users & Permissions** > **Users.**
3. Select a user to grant permissions.
* To assign a custom role that contains organization-level permissions, click **Manage** to the right of **Organization Roles.**
* To assign the custom role to a directory, click Manage to the right of **User Management Roles.**
* To assign custom roles to a site, click **Manage** to the right of **Site Roles.**
4. From the role types list, select **Custom.**
5. Deselect the role you would like to revoke, then click **Save**.
Groups
#### **Grant custom roles to a group**
1. In Verkada Command, go to **All Products > Admin.**
2. Select **Users & Permissions** > **Groups.**
3. Select a Command group to grant permissions.
4. At the top, click **Roles.**
5. Select a user to grant permissions.
* To assign a custom role that contains organization-level permissions, click **Manage** to the right of **Organization Roles.**
* To assign the custom role to a directory, click Manage to the right of **User Management Roles.**
* To assign custom roles to a site, click **Manage** to the right of **Site Roles.**
6. From the role types list, select **Custom.**
7. Select **Add,** then choose your custom role from the list, then click **Save**.
#### **Grant custom roles from a group**
1. In Verkada Command, go to **All Products > Admin.**
2. Select **Users & Permissions** > **Groups.**
3. Select a Command group to revoke permissions.
4. At the top, click **Roles**.
5. Select a user to grant permissions.
* To assign a custom role that contains organization-level permissions, click **Manage** to the right of **Organization Roles.**
* To assign the custom role to a directory, click Manage to the right of **User Management Roles.**
* To assign custom roles to a site, click **Manage** to the right of **Site Roles.**
6. From the role types list, select **Custom.**
7. Deselect the role you would like to revoke, then click **Save**.
***
## Supported permissions
Admins can toggle each permission below when creating a custom role to control what users can view and manage within a site.
{% tabs %}
{% tab title="Command Platform" %}
**Site & Device Configuration - Organization-wide**
* Create new sites
* Add new devices and decommission unassigned devices
**Site & Device Configuration - Sites**
* View site
* Create, rename, and delete subsites for a given site
**Organization Settings**
* Manage API keys, webhooks, and integrations
* View and export audit log
* Manage and restrict access to shared links for users in the organization
* View support cases
* View support contact information
* Enable support access to organization
* Rename the organization
* Manage org-wide authentication, encryption, and provisioning settings
* Toggle features for your organization
* Manage partner relationships
* Manage public disclosures, data sharing, and data residency settings
* Manage key contacts for individuals outside your organization
**User & Group Management - Organization-wide**
* Create, edit, and delete user directories
* View Command users across the organization
* Create and edit Command users across the organization
* Delete Command users across the organization
* Permanently delete users
* Assign and remove Command users to/from Command groups across the organization
* Create and edit Command groups across the organization
* Delete Command groups across the organization
**User & Group Management - User directories**
* View Command users in a directory
* Create and edit Command users in a directory
* Delete Command users in a directory
* Remove users from a directory
* Assign and remove Command users to/from Command groups in a directory
* Create and edit Command groups in a directory
* Delete Command groups in a directory
**Alerts**
* Create and share alert rules
{% endtab %}
{% tab title="Cameras" %}
**Camera Settings**
* View camera details
* Manage camera settings
* Accept face search & biometric compliance settings
* Manage cloud backup
* Set privacy mode
* Set camera read-only mode
* Apply site device defaults
* Manage organization camera presets
* Manage device network and access
* Configure encoding and bandwidth
* View camera details
* Add and modify cameras in site
* Add cameras to the organization and the site(s) where they have this permission
* Delete cameras only from the site(s) where they have this permission
* Manage camera settings
* Control PTZ Cameras
* Assign a [PTZ priority level](/verkada-cameras/configuration/view-and-edit-camera-settings/ptz-user-priority.md) (1–5) to determine which user keeps control when multiple users try to operate the same PTZ camera
**Video & Sharing**
* View historical footage
* View live camera streams
* Share camera live links
**Analytics & Search**
* Use AI-powered search
* View people analytics
* Manage occupancy trends
* View person of interest lists
* Manage person of interest lists
* View license plate analytics
* View vehicle analytics
**Archives**
* View public archives
* Download archives
* Delete archives
* Share archive live links
* Create public archives
* Create private archives
* View all private archives
{% endtab %}
{% tab title="Access Control" %}
**Site Configuration**
* View site's doors, inputs/outputs, and events
* Remote unlock site's doors (scheduled access only)
* Remote unlock site's doors (administrator override)
* Manage visits for the site
* Apply door schedules, door exceptions, and overrides to site's doors
* Create and edit access levels and access exceptions for the site
* Create and edit visit access templates for site
* Create and edit roll call templates for site
* View areas and clear anti-passback violations for site
* Manage lockdowns for site
* Manage area settings for site
* Manage doors, inputs/outputs, and access controllers for site
* Manage site's access control settings
* Grant Access Site roles to other users
**System Settings**
* Create and edit door schedules, door exceptions, and access exceptions
* Create and edit badge templates for the organization
* Manage organization-wide access control settings
* Create and edit buildings and floors
* Grant Access System roles to other users
**Access User & Group Management**
* Manage user credentials and print user badges
* Suspend user access
* Create and edit users
* Edit access group membership
* Manage access groups
* Grant Access User roles to other users
* Create and edit badge templates for directories
{% endtab %}
{% tab title="Intercoms" %}
**Visibility**
* View Intercoms
* View live Intercom status
* View Intercom events
**Management**
* Manage visit keys for Intercoms
* View call flows
* Modify call flows
* View Intercom settings
* Modify Intercom settings
**Actions**
* Intercom unlock
* Intercom talkdown
{% endtab %}
{% tab title="Workplace" %}
**Site Configuration**
* View Guest site
* Manage Guest site
**Org Configuration**
* Edit Workplace org settings
* View Workplace org settings
**Visitor Management - Sites**
* View approved lists
* Modify approved lists
* View deny lists
* Modify deny lists
* Manage visitor security screening results
* Manage applicant security screening results
* Override denials
* View Guest phone numbers
**Visitor Management - Organization-wide**
* View global approved lists
* Modify global approved lists
* View global deny lists
* Modify global deny lists
**Incidents Response**
* End responses
* Launch responses
* View responses
{% endtab %}
{% endtabs %}
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://help.verkada.com/command/users-and-permissions/roles-and-permissions-for-command/custom-roles.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
