Create Custom Roles

Custom roles define organization-level (product-level) permissions for a Contentstack product when the default roles do not match a team's responsibilities. You create custom roles through Administration, select the permission categories that apply to the product, and choose the actions each role can perform.

Use custom roles to align access with internal responsibilities and compliance requirements, such as granting view-only access to one product area while restricting another.

Note: You must have an Administration role with permission to manage organization roles, such as Admin.

To create a custom organization-level role, log in to your Contentstack account and perform the steps given below:

1. Navigate to Administration through the "App Switcher", then click the Roles tab to view roles.
2. Click + New Role.
3. Enter a Name and a Description.
4. Under Choose a Product, select the product the role applies to, such as CMS, Assets, or Administration.
5. Review the permission categories available for the selected product. The categories vary by product. For example, Assets includes Spaces, Fields, Asset Types, Users, Roles, and Languages.
6. For each category, click + Select Permissions, or click the vertical ellipsis and select Manage Permissions.
7. In the permissions side panel, select the required actions for the category, such as View, Create, Edit, or Delete.
8. Click Save.

   Tip: Configure permissions only for the areas this role should access. Leave other categories unselected to restrict access.

9. Click Create Role.

The custom role is created and appears on the Roles listing page with a Custom tag.

Where Custom Roles Are Available

After you create an organization-level custom role, it becomes available for selection when you:

• Invite new users.
• Edit an existing user's organization-level roles for that product.

Note: Only organization-level (product-level) custom roles can be created through Administration. Project-level custom roles, such as custom stack, space, or AgentOS project roles, must be created from the respective project or its per-product settings page. Project-level custom roles appear in the invitation flow once created, but you cannot create them from Administration.

Additional Resource: To assign roles when onboarding users, refer to the Invite Users to Organization documentation.