Roles

Roles determine the level of access a user has. InSkill provides a set of core roles, and you can create custom roles when you need a specific combination of permissions.

Roles are managed on the Roles tab of the Admin portal. To work in the Copilots portal, a user needs the Copilot Expertise permission; of the core roles, Author, Script Author, Helpdesk Expert, Group Administrator, and Account Administrator have it.

The Roles tab, listing the core roles with a lock icon, each role's access level, and its permissions. — The Roles tab, listing each role's access level and permissions

The Roles tab lists every role with its Access Level and Permissions. + Add New creates a custom role.

Exporting Roles

Click Export at the top left of the Roles tab. InSkill downloads roles.csv to your computer, with one row per role and these columns:

Column	Contents
Name	The role's name.
Access Level	The role's access level.
Permissions	The permissions the role grants, separated by commas.
Web Portal Access	Yes if the role can sign in to the portals.
System Role	Yes for a core role provided by InSkill; No for a custom role.

Core Roles

A lock icon marks a core role. Core roles are provided by InSkill, cover the most common usage patterns, and cannot be edited — click one to see its settings.

App roles

For people who use InSkill only through the InSkill app. Each has the InSkill GPT and InSkill Apps permissions, at a different access level:

Role	Access level	Typical user
User 1 - InSkill Apps	User 1	An everyday operator working with a machine, who needs the core documentation and expertise.
Tech 1 - InSkill Apps	Tech 1	A Technician with expertise on a machine, who needs additional expertise and documentation.
Expert - InSkill Apps	Expert	An expert on the specific machine, who needs the highest level of expertise and documentation.

Internal roles

For people who also work in the portals:

Role	Access level	What it can do
Helpdesk Agent	User 1	Use Ask, InSkill GPT, and the InSkill app. Typically a help desk or call center agent.
Helpdesk Expert	Expert	Everything a Helpdesk Agent can, at the Expert level, plus copilot expertise and the Intelligence portal.
Author	Expert	Everything a Helpdesk Expert can, plus creating and editing copilots.
Script Author	Expert	Everything an Author can, plus the Vault, for the secrets that scripts use.
Group Administrator	Expert	Full capabilities — account, assets, copilots, roles, and team — limited to the groups the user is a member of.
Account Administrator	Expert	Every permission across the whole account, including the Vault.

Creating a New Role

To create a custom role, click + Add New in the top-right corner of the Roles tab. A new role needs a name, an access level, and a set of permissions. See Editing Roles for each field.

The new role form, with Role Name, Re-authenticate, Access Level, and the permission checkboxes. — The new role form

Permissions

Permission	Applies to	Definition
Copilots	Portal	Access to copilots in the Copilots portal, including creating new ones. Choose Can View or Can Edit.
Assets	Portal	Access to assets and groups in the Assets portal. Choose Can View or Can Edit.
Account	Portal	Access to account settings, where you can update the logo, name, GPT disclaimer, CSS, and languages.
Team	Portal	Access to the Admin portal, covering Team, Customers, User Log, and Security. Choose Can View or Can Edit.
Roles	Portal	Create and edit custom roles. Core roles cannot be edited.
InSkill Apps	App	Access to the InSkill app from the phone's app store.
InSkill Portal	Portal	Access to Ask, the browser workspace at expert.inskill.ai.
InSkill GPT	Portal and app	Use InSkill GPT. Can Operate lets the user ask questions; Full Access also lets the user modify GPT prompts on resources and copilots, and agents on copilots.
Copilot Expertise	Portal	Access to expertise in the Copilots portal: tasks, steps, and resources in copilots, and account resources including shared ones.
Vault	Portal	Access to the Vault. Granted only by a core role — Account Administrator or Script Author — so it cannot be selected on a custom role.
Intelligence	Portal	Access to the Intelligence portal, including Reports, Data, and GPT.

Access Levels

Access levels let an author restrict access throughout the platform — at the resource, task, step, or customer sharing level. The available levels are User 1, User 2, User 3, Tech 1, Tech 2, Tech 3, and Expert. See Visibility by Role.

InSkill recommends these designations:

User type	Access level
Customer	User 1, User 2, and User 3
Employee	Tech 1, Tech 2, Tech 3, and Expert

Portal Users vs App Users

Using the portal requires signing in with an email address and password. Sign-in information is created after you add the new member to the team, so provide an email address for any user who needs portal access.

If the new user is only going to use the app, an email address is not required. Instead, the account administrator opens the team member's page, and the user downloads the app and scans the QR code shown there to join the account. See Authorizing the InSkill App.