The role page

The role page edits one role: the name, the description, and the permission matrix — every permission as a checkbox, grouped by area. Some rows are umbrellas that grant whole branches.

Changes hit everyone, now

Changing permissions here grants or removes access for everyone holding the role, immediately. System roles show their own warning — and the admin role can’t have permissions taken away.

The assignees panel shows who holds the role, split into primary and additional holders — useful for seeing the reach before you change anything.

Custom roles can be deleted at the bottom; holders then lose only what the role granted, not their other grants. System roles can’t be deleted. Every change is logged in the audit log.