User Roles and Permissions

This article explains the different user roles in Credentium Issuer and what each role can do.

Overview

Credentium Issuer has three user roles with different permission levels:

Role Hierarchy

Administrator (highest)
    ↓
Manager
    ↓
Operator (lowest)

Each role includes all permissions of the roles below it, plus additional capabilities.

Detailed Permissions

User Management

Organization Management

Credential Template Management

Credential Issuance

Credential Management

Role Descriptions

Operator

Best for: Staff who need to issue credentials but don't need to create or modify templates.

Can:

• Access the credential issuance wizard
• Issue credentials to recipients (manual and bulk)
• View and search issued credentials
• Revoke credentials
• Resend notification emails

Cannot:

• Create or edit credential templates
• Access organization settings
• Manage other users
• View or create API keys

Use case example: A university registrar staff member who issues diplomas to graduates using predefined templates.

Manager

Best for: Staff who design credentials and manage the issuance process.

Can do everything an Operator can, plus:

• Create new credential templates
• Edit existing templates
• Add claims to templates
• Archive templates
• View all templates

Cannot:

• Access organization settings
• Manage other users
• View or create API keys

Use case example: A training department lead who designs certification programs and their credential templates.

Administrator

Best for: Organization owners or IT administrators who need full control.

Can do everything a Manager can, plus:

• Edit organization profile and settings
• Upload organization logo and seal stamp
• Invite new users
• Assign roles to users
• Remove users
• View subscription details
• Create and manage API keys
• Contact support

Use case example: The head of HR or IT administrator who oversees the entire credentialing system.

Role Assignment

Setting a User's Role

Only Administrators can assign roles:

1. Go to Organization Settings → Users
2. Click Add User (for new users) or Edit (for existing users)
3. Select the appropriate role from the dropdown
4. Save changes

Changing Your Own Role

Users cannot change their own role. Another Administrator must make the change.

Minimum Administrator Requirement

Every organization must have at least one Administrator. The system prevents removing or demoting the last Administrator.

Best Practices

Role Assignment Guidelines

• Start with the minimum role - Give users only the access they need
• Limit Administrator access - Only trusted personnel should have admin rights
• Use Operators for routine issuance - Staff who only issue credentials don't need Manager access
• Assign Managers to template owners - People who design credentials need Manager access

Security Recommendations

• Review user roles periodically
• Remove access promptly when employees leave
• Keep the number of Administrators minimal
• Document who has what role and why

Common Scenarios

Troubleshooting

"Access Denied" or Missing Menu Items

Cause: User doesn't have the required role for the action.

Solution: Contact an Administrator to upgrade the user's role if needed.

Cannot Add or Remove Users

Cause: User is not an Administrator.

Solution: Only Administrators can manage users. Contact your organization's Administrator.

Cannot Access Organization Settings

Cause: User is not an Administrator.

Solution: Organization settings are only accessible to Administrators.

Cannot Create Credential Templates

Cause: User is an Operator (not Manager or Administrator).

Solution: Contact an Administrator to upgrade to Manager role if template creation is needed.

Frequently Asked Questions

Can a user have multiple roles?

No. Each user has exactly one role. Assign the highest role needed for their responsibilities.

Who can see the role permissions matrix?

All users can view the permissions matrix from the Users tab, but only Administrators can access that tab.

Can roles be customized?

No. The three roles (Administrator, Manager, Operator) are fixed with predefined permissions.

What happens when an Administrator leaves?

Ensure another user is promoted to Administrator before removing the departing admin. The system requires at least one Administrator.

Can Operators see credential templates?

Operators can see templates in the issuance wizard (to select which template to issue), but cannot access the template management section to create or edit templates.

Need Help?

If you have questions about user roles and permissions, please contact:

Credentium Support Email: support@credentium.com

Last updated: January 2026