Roles and permissions brief
Model roles and permissions so access is predictable, explainable, and safe throughout the account lifecycle.
SaaS and dashboards · 45 min · Advanced · 25 questions
Policy model
Which actions may each role perform?
Which resource types can each role access?
At which scope does each permission apply?
How do organization permissions flow into workspaces?
How do team permissions affect projects?
When may an inherited permission be overridden?
Which rule wins when permissions conflict?
Default access
What access does a new user receive by default?
What access does a new resource grant by default?
What access does a new integration receive by default?
Does the product use fixed roles?
Can administrators combine permissions into roles?
Can administrators create fully custom roles?
Which permission combinations must be prohibited?
Invitations
Who may invite new members?
Which roles may be assigned in an invitation?
When should an invitation expire?
Which email domains may receive invitations?
Ownership and external access
Who may transfer ownership?
What prevents removal of the last owner?
What access remains after an account is suspended?
What may a guest access?
What may a vendor access?
How will service-account access be limited?
How should the product explain unavailable actions?
How to use this brief
Use this brief as a bank of questions for the conversation. Choose what is relevant, mark covered questions as you go, and skip anything that has already been answered.
Use this brief when...
Use when you need to model roles and permissions so access is predictable, explainable, and safe throughout the account lifecycle.
Best used as: Live call · Async intake
- Category
- SaaS and dashboards
- Discussion time
- 45 minutes
- Depth
- Advanced
- Last updated
- Jul 21, 2026
- Scope
- Design briefs
- Best used as
- Live callAsync intake
- Design roles
- Product designer
- Audience
- Product designersUX and UI designersProduct managersDesign leads
- Platforms
- WebAPISaaS
- Company type
- B2BEnterpriseMarketplace
- Product stage
- GrowthMature product
- Tags
- saas-and-dashboardsroles-and-permissionssystems-and-platformsauthorization-modelenterprise-access