Default portal roles

Prev Next

Document360 provides four default portal roles. Each role comes with a fixed set of permissions that cannot be changed. If none of these match your requirements, you can create a custom portal role. See Custom portal roles.


Overview of default portal roles

Role Access level
Owner Complete access to all features
Admin Complete access except Billing (view only)
Contributor Project settings view access only
Reviewer No access to portal settings; can review articles, add inline comments, and update workflow assignments

Owner

The Owner role has complete access to all features and settings in the knowledge base portal, including billing.

Feature View Update
Project settings ✅ ✅
Team auditing ✅ ✅
Event notifications ✅ ✅
API tokens ✅ ✅
Extensions ✅ ✅
Backup & restore ✅ ✅
Site domain ✅ ✅
Custom CSS & JavaScript ✅ ✅
Integrations ✅ ✅
Cookie consent ✅ ✅
Announcements ✅ ✅
Ticket deflector ✅ ✅
Knowledge base widget ✅ ✅
Roles, accounts & groups ✅ ✅
Site visibility ✅ ✅
IP restrictions ✅ ✅
Enterprise SSO ✅ ✅
Billing & invoice ✅ ✅

Admin

The Admin role has complete access to all features except Billing, which is view-only.

Feature View Update
Project settings ✅ ✅
Team auditing ✅ ✅
Event notifications ✅ ✅
API tokens ✅ ✅
Extensions ✅ ✅
Backup & restore ✅ ✅
Site domain ✅ ✅
Custom CSS & JavaScript ✅ ✅
Integrations ✅ ✅
Cookie consent ✅ ✅
Announcements ✅ ✅
Ticket deflector ✅ ✅
Knowledge base widget ✅ ✅
Roles, accounts & groups ✅ ✅
Site visibility ✅ ✅
IP restrictions ✅ ✅
Enterprise SSO ✅ ✅
Billing & invoice ✅ ❌

Contributor

The Contributor role has view-only access to project settings. All other features are restricted.

Feature View Update
Project settings ✅ ❌
Team auditing ❌ ❌
Event notifications ❌ ❌
API tokens ❌ ❌
Extensions ❌ ❌
Backup & restore ❌ ❌
Site domain ❌ ❌
Custom CSS & JavaScript ❌ ❌
Integrations ❌ ❌
Cookie consent ❌ ❌
Announcements ❌ ❌
Ticket deflector ❌ ❌
Knowledge base widget ❌ ❌
Roles, accounts & groups ❌ ❌
Site visibility ❌ ❌
IP restrictions ❌ ❌
Enterprise SSO ❌ ❌
Billing & invoice ❌ ❌

NOTE
By default, the Contributor portal role has limited access to most administrative permissions. If a Contributor requires access to a specific permission, consider creating a custom portal role with the required permissions enabled and assigning it to the user. The content role can remain unchanged, ensuring the user does not gain any unintended publishing or editing permissions.


Reviewer

The Reviewer portal role does not have view or update access to any portal settings. Reviewer accounts are counted separately from users, under Reviewers in Account utilization.

Reviewers can log in to the knowledge base portal, review articles and categories within their content access, add inline comments, resolve comments, and update workflow assignments. They cannot delete or publish content. For the full list of content permissions, see Default content roles.

NOTE
When you assign the Reviewer portal role, the content role is set to Reviewer automatically and cannot be changed. You can still change the reviewer's content access (project, workspace, category, or article). Users with other portal roles can be assigned the Reviewer content role.


What each portal permission controls

Permission What it allows
Project settings Access and modify overall project settings, including basic configurations and preferences
Team auditing Monitor and manage team activities, track events and changes within the project
Event notifications Set up and manage notifications about project activities; configure notification channels and email domains
API tokens Access and manage API tokens for integrating with external systems and automating tasks
Extensions Manage extension services that enhance knowledge base site functionality
Backup & restore Set up and manage backup and restoration processes
Site domain Manage the custom domain for the knowledge base site
Custom CSS & JavaScript Access and manage custom CSS and JavaScript scripts to customise appearance and functionality
Integrations Access and manage integrations that connect the project with other tools and services
Cookie consent Access and update the cookie consent policy
Announcements Manage smart bars and announcements on the knowledge base site
Ticket deflector Manage ticket deflectors that direct users to relevant content before they submit support tickets
Knowledge base widget Set up, access, and manage knowledge base assistants
Roles, accounts & groups Access and manage users, readers, and groups, along with their roles
Site visibility Modify reader access settings (Public, Private, or Mixed)
IP restrictions Manage which IP addresses can access the knowledge base site
Enterprise SSO Access and manage SSO and JWT configurations
Billing & invoice Access and manage billing services, including invoices and subscriptions

Best practices

  • Assign the Owner role only to users who need to manage billing and have full control of the project. Limit the number of Owners.
  • Use Admin for day-to-day project administration where billing access is not required.
  • Use Contributor only for users who need read-only access to project settings without any ability to modify configurations.
  • If a Contributor needs access to a specific feature, create a custom portal role rather than promoting them to Admin — this prevents unintended access to other features.