Manage a User Role
A user role defines (1) the actions that an individual can complete and (2) the pages they can access in the application with their user account. Case IQ contains a “Dynamic Action Control List” (ACL) to manage permissions and user roles, which is a hierarchy structure of permissions that allows System Administrators to grant and revoke permissions by user role. See an explanation of each ACL permission option in Access Control List. You can add, update, and edit user roles at any time. You can also ensure that no roles other than the “Super User” or “System Administrator” can manage user roles.
Add a User Role
To create a new user role, select the “User Role” option on the Access tab and click the Add User Role button. On the New User Role form, use the checkboxes in the Permissions section to adjust the entities that users with that role can access and what actions they can complete in the application (see Access Control List for an explanation of on each option).
Can't Select an ACL Checkbox?
Check if you have clicked the "View" checkbox for the record type. A role must be granted permissions to view a record type before you can select any other actions for that record type, with the exception of cases.
Copy a User Role
If you need to create a new user role that is similar to an existing user role in the system, you can copy the existing user role. Copy a user role from its page:
- Click the Edit button.
- Click the Options (
) button, then select the "Save and Copy" option. - If you made any changes to the existing user role, the changes will be saved to the user role. Click Confirm to proceed.
- A New User Role form will be loaded, containing the same permissions as the original user role. You may make any changes to the new user role.
- Click Save to finalize creating your new user role.
Edit a User Role
You can update an existing user role from its page. If you have permission to edit user roles, use the following steps to update a role:
- Click the Edit button on a role's page.
- The user role's page will now be in edit mode. Click the checkboxes to grant or revoke permissions as needed.
- When you have completed your changes, click the Save button.
Set up Case Filters
You can restrict the types of cases users can access by configuring case filters for a user role. Before allowing someone to access a case, the system will check if their role's case filters are met. You can use any “picklist” or “picklist multiple” field on both the user profile and case forms as a case filter. For example, if your application has a "Department" field on the user profile and case forms, you could set up a case filter to ensure users can only access a case with the same "Department" value as their user profile.
Maximum Case Filters
You can add up to 10 case filters to a user role. On the case form, you can set a maximum of 5 fields as available for case filters.
Case Filter Examples
By setting up case filters for a user role, you can control the exact situations in which a user can view a case. This allows you to mitigate the risk of information being accessed without appropriate authorization. For example, you could configure case filters so that:
- Investigators can only access cases in their geographic region, e.g. American investigators will only be able to see cases that happened in the US.
- Managers can only access cases allocated to their department, e.g. Human Resources managers can only see cases triaged to the HR department.
- Investigators cannot access cases that happened in their office building, e.g. an employee working out of the Greenfield office will not see cases that occurred at the Greenfield office.
In this article, we demonstrate how to add case filters using an example Department Manager role. Users with the "Department Manager" role will only be able to view cases with the same “Department” value as their user profile in our sample application. The user profile below, Jen Cedar, will only be able to access cases where the “Department” is “Human Resources”, including case 2026-007. She will not be able to access case 2026-011, since its department is "Legal".
Before you can set up case filters, you must set any case fields you want to use in filters as "Available for Case Filtering". However, the "Case Type" field and all user profile picklists will be available by default. To set case fields as available for case filters:
1. Navigate to Settings > Forms. Click "Case" in the Forms grid to load it in the Form Builder.
2. Click the Edit button on the Form Builder. The case form will now be in edit mode.
3. Click the picklist or picklist multiple field you want to use for a case filter. For this example, we use a picklist called "Department". To create a new picklist field, see Configure a Picklist and Picklist Option for details.
User Profile and Case Picklist Values Must Match
Make sure that your case and user profile picklists contain the same values, as in the screenshots below. Case filters are case sensitive, so the values must be in the same case in both picklists. For example, Case IQ will not match "Legal" with "LEGAL".
4. In the field's properties, click the "Available for Case Filtering" toggle to turn it on. You can set up to 5 fields as available for case filters.
5. Click the Save button at the bottom of the Field Type sidebar.
6. When you are done making changes to the form, click the Publish button. Then, click Confirm on the "Publish changes" pop-up. You can now use this picklist in case filters.
Now that you have set case fields to be available for case filters, you can configure case filters for your application's user roles. To add case filters for a user role:
1. Navigate to Settings > Access > User Roles. Then, select a user role.
2. Click the Edit button on the User Role's page.
3. Click the Case Filters tab.
4. On the Case Filters tab, use the dropdown menus to set a user profile picklist, operator, and case picklist for a filter. See the labelled screenshot and explanations below for details on each dropdown and button.
- Select a user profile picklist for the filter. All picklist or picklist multiple fields on the user profile form will be available in this dropdown.
- Indicate if the user profile picklist value should include or not include the case picklist value.
- By selecting "Include", the filter will be met when the user profile's picklist value matches the case's picklist value.
- If you select "Not Include", the filter will be met when the case and user profile picklist values do not match.
- Choose a case picklist for the filter. All case picklist or picklist multiple fields set as “Available for Case Filtering” will be displayed in this dropdown.
- If you want to add more filters, click the + Add Another button. You can add up to 10 case filters to a user role.
- If you add multiple filters, use the "All/Or" toggle to set whether all or just one of the filters must be met for users to be able to access cases.
- By selecting "All", users will only be able to access a case when all filters are met.
- If you select "Or", users can access a case even if only one of the filters is met.
For our example "Department Manager" user role, we created the following case filter: "User's Department Includes Case's Department".
5. Click the Save button on the User Role's page. Now, users with this role will only be able to access a case when its filters are met.
Delete a User Role
You can delete a user role from its page. If you have permission to delete user roles, click the Options () button on a user role's page, then select "Delete" to permanently remove the role from the application.
Deleting User Roles Assigned to Accounts
You will not be able to delete user roles in which a user account is currently assigned. Before you can delete the role, update any user accounts with that user role to another role, then return to the user role's page to delete the role.