Skip to main content

Manage access rules

Control which roles and members can see and use specific channels and channel groups.

What are access rules?​

An access rule grants a role or member the ability to see and interact with a specific channel or channel group. Without an access rule, the channel is invisible to that role or member.

Each access rule connects a subject (who gets access) to a target (what they can access):

ComponentDescription
SubjectThe role or member being granted access
TargetThe channel or channel group where the rule applies
Permission overlayOptional adjustments to what the subject can do (see below)

When you create a channel or channel group, Root automatically adds an access rule for the EVERYONE role. This makes the channel visible to all members by default. You can remove this rule to make the channel private, or keep it and adjust permissions with an overlay.

Permission overlays​

A permission overlay adjusts specific permissions on the target of an access rule. Most access rules don't need an overlay. Simply adding a rule is enough to let members see and use the channel based on their role permissions.

Overlays are useful when you need fine-grained control. For example, an announcements channel might let everyone read messages but restrict posting to leaders only.

Each permission in an overlay has three possible states:

StateEffect
AllowGrants the permission in this channel, regardless of role settings
DenyRemoves the permission in this channel, regardless of role settings
InheritUses the permission from the member's roles (default)

The deny-wins rule​

When multiple access rules apply to the same member (through different roles), Root evaluates all of them. If any overlay denies a permission, the member doesn't have it, even if another overlay allows it.

Who can manage access rules?​

Community leaders need the following permission on the target channel or channel group.

Required permissions
  • Full Control (Channel)

Create an access rule​

Add an access rule to grant a role or member visibility to a channel or channel group.

  1. Right-click the channel or channel group and select Edit.
  2. Go to the Permissions section.
  3. Select Add role or Add user.
  4. Choose a role or search for a specific member.
  5. (Optional) Configure a permission overlay to allow or deny specific permissions.
  6. Select Save.

Edit an access rule​

Modify the permission overlay for an existing access rule.

  1. Right-click the channel or channel group and select Edit.
  2. Go to the Permissions section.
  3. Select the role or member you want to modify.
  4. For each permission you want to change, select Allow, Deny, or Inherit.
  5. Select Save.

Remove an access rule​

Remove an access rule to revoke a role or member's visibility to a channel or channel group.

  1. Right-click the channel or channel group and select Edit.
  2. Go to the Permissions section.
  3. Select the role or member you want to remove.
  4. Right-click and select Remove.
  5. Select Save.