Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Team & access

Team & access

Which roles come built in?

Quick answer

The built-in roles we saw in a workspace are SuperAdmin and Developer. SuperAdmin is reserved and system roles stay in place. You build your own custom roles, such as Pro Dev, from a list of permission keys.

The short version

Cyberlop comes with SuperAdmin and Developer. When we reviewed a workspace, those were the built-in names we saw. Other built-in roles may exist, and your admin can tell you the full list.

How it works in Cyberlop

RoleWhat to know
SuperAdminA reserved role. Its name is taken, and the API says it is immutable.
DeveloperA built-in role. The Activity feed shows it handed to new users.
Custom rolesRoles your admins build, such as Pro Dev, from a list of permission keys.

Your own role shows as a badge in the page header, next to your email. The sidebar adapts too, because Administration shows for admins only.

A role is a bundle of permissions. Each permission is a key such as scan:run. A user holds a role, and that role decides which actions the person may take anywhere in the workspace, from starting a scan to changing a setting. This is role-based access control. Teams and groups then limit which items those actions reach.

  • Nobody edits SuperAdmin.
  • System roles stay put.
  • Anyone with role:manage can create, update and delete custom roles, and that includes changing which permission keys a custom role holds after you first saved it.

What to do next

Start with how to create a custom role, then read about the permission key format. To see who holds which role, read how to see each user's role and team grants. If an edit fails, see why SuperAdmin stays fixed. The API tokens and permissions tutorial adds context.

Full tutorial

Cyberlop API tokens and permissions: how to issue and limit them

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.