Help Screens Roles & permissions
User — Roles ROL-04
Assign and remove roles for a user.
| Who can use it | users.list (read), roles.manage (write) |
|---|---|
| Where it is | /admin/users/:userId/roles · link: https://hub.substratalapps.com/admin/users/:userId/roles or substratal://admin/users/:userId/roles |
| Available on | Web (PWA), iOS / iPadOS, Android, Windows, Linux (GNOME), macOS |
| Phase | MVP |
What you can do here
- Assign — idempotent; 200 already held
- Remove — 409 → implicit role
Related guides
- Roles and permissions — Built-in roles, creating narrower ones, and assigning them safely.
- Your first hour as an administrator — Secure your account, find your way around Manage, and make a narrower role for your support team.
On your platform
| App | Status | How it's built |
|---|---|---|
| Web (PWA) | — | tabpanel (route segment) |
| iOS / iPadOS | — | Segment content |
| Android | Planned | Tab content |
| Windows | — | SelectorBar item content |
| Linux (GNOME) | — | AdwViewStack page |
| macOS | — | Tab content inside detail |
Status is reported by each app's repository; — means that app doesn't report it yet.
For developers: API calls
| Method | Path | What it does |
|---|---|---|
| GET | /users/{id}/roles | List a user's Role assignments (including implicit default_app_role) |
| POST | /users/{id}/roles/{roleId} | Assign a Role (idempotent — 200 if already held) |
| DELETE | /users/{id}/roles/{roleId} | Remove a Role assignment (idempotent) |
Every call sends Substratal-Version: 1. Paths are at the host root, with no /v1.