Overview
Assign a teammate a default role across your customers, then override that role for a specific customer when their access should differ.
Use Case: Give a team member the right Unity Platform access everywhere they work, then tighten or expand access for one customer without changing the rest.
Who Should Use This: Super Admins and Admins who manage users and roles in Unity Platform.
Interactive walkthrough
Prerequisites
Super Admin or Admin role (Role Management permission)
Access to Admin in Unity Platform
The user already exists on your team
How to Change a User’s Default Role
Step 1: Open Admin
Select Admin in the left sidebar.
Where to find it: Left-side navigation
What you'll see: Admin Settings opens. Team Management is the default tab.
Step 2: Open the User
Click the team member’s name in the member list.
Where to find it: Team Management table
What you'll see: The user’s profile opens.
Step 3: Open Roles & Permissions
Select the Roles & Permissions tab.
Where to find it: Tab row on the user profile (Details, Roles & Permissions, Authentication)
What you'll see: Default Role at the top, then Tenant Access listing each customer.
Step 4: Open the Default Role Dropdown
Open the role dropdown in the Default Role card.
Where to find it: Default Role card, described as the role automatically applied across managed customer tenants
What you'll see: Available system and custom roles you are allowed to assign to this user.
Step 5: Select the New Role
Select the role this user should have by default.
Where to find it: Role dropdown
What you'll see: The selected role is highlighted.
Step 6: Confirm the Role Change
In the Change Default Role? dialog, click Change Role.
Where to find it: Confirmation dialog after you pick a different role
What you'll see: A success message that the default role updated. Customers still on the default role receive the new role. Customers with an override keep their current role.
How to Override Access for One Customer
Use an override when this user needs a different role (or no access) on one customer, without changing their default role everywhere else.
Step 7: Click Override
In the Tenant Access table, find the customer and click Override.
Where to find it: Actions column on that customer’s row
What you'll see: A role dropdown appears on the row, with Save.
Step 8: Choose the Customer-Specific Role
Open the role dropdown and select the role for this customer. Choose No access to remove access on that customer only.
Where to find it: Role dropdown on the row you are editing
What you'll see: The selected role (or No access) is shown on the row.
Step 9: Click Save
Click Save to apply the override.
Where to find it: Next to the role dropdown on that row
What you'll see: A success message that the tenant override was set. The Source column for that customer shows Override.
Expected Result
The user keeps their default role across customers that do not have an override. The overridden customer uses the role you saved (or has no access).
You'll know it worked when: Default Role shows the new role, Tenant Access lists Default or Override per customer, and you see the success toast.
Common Tasks
Revert a Customer to the Default Role
- In Tenant Access, click Revert on a row whose Source is Override.
- Confirm Remove Tenant Override?. That customer returns to the user’s default role.
Review What a Role Can Do
- See Unity Platform System Roles and Permissions for each system role and the permission matrix.
Troubleshooting
Issue: The role dropdown is disabled
Solution: You cannot change a user whose role ranks at or above yours. Super Admins can manage Admins. Admins cannot manage Super Admins or other Admins. Ask a Super Admin to make the change.
Issue: The new default role did not apply to every customer
Solution: Check Tenant Access. Rows marked Override keep their customer-specific role until you revert them.
Issue: Changing the default to End User or Co-Managed removed access to other customers
Solution: Those roles apply only to the user’s home tenant. Other customers that were using the default role lose access. Set an override on any customer that should still have access, or choose a partner role (Admin, Technician, Billing) if they should reach every customer.
Additional Information
- Note: Super Admin, Admin, Technician, and Billing reach every customer under your partner account when they are the default role. End User and Co-Managed reach the home tenant only.
- Tip: Set the default to the access this person should have on most customers, then override exceptions.
- Note: System roles cannot be edited. To tailor permissions, create a custom role and assign that instead. See Create and Edit Custom User Roles.