Roles in Crystallize let you control access and responsibilities across your tenant. They define what users can read, create, update, or delete. Both in the App UI and through the API.

Each section is represented visually, allowing you to toggle permissions for specific actions like Create, Update, Publish, or Delete.
Permissions control access both in the App UI and the API.
Each entity (for example, Items, Orders, Customers) can have specific permissions:
You can grant full access quickly using the Give full access option or configure permissions individually for fine-grained control.
You can limit access further by adding conditions.
For the catalogue conditions can be based on language or specific items. For example, allowing a user to edit only English content or a particular product category.
To add a condition to the catalogue:
This enables flexible access control, ideal for larger teams managing content across regions or product domains.

Some permissions in a role have their own UI Preferences, allowing you to tailor the interface experience for different teams or responsibilities. This ensures that users see the most relevant shapes, components or price variants.
Users represent the people who have access to your Crystallize tenant. Each user can be assigned one role, which defines their permissions and access level across Crystallize.
You can manage users from the Users section in Settings.