Intervy uses role-based access control. Each organization member holds one role, or no role at all, and a role carries a set of permission strings in the format resource:action. Intervy checks these strings before it allows any sensitive operation. A member with no role has no permissions.
Predefined roles
Intervy ships three system roles that every organization inherits. System roles cannot be edited or deleted.
| Role | Permissions | Best for |
|---|---|---|
| Admin | All permissions (61) | Founders, HR leads, system owners |
| Staffing | 48 permissions — everything except organization settings and deletion, removing members, creating, editing or deleting roles, billing, email templates, deleting feedback forms, the audit log, and conducting interviews | Recruiters, hiring coordinators |
| Interviewer | 8 permissions — conduct interviews, view competencies, questions, templates, credits, job roles, levels, and feedback forms | Engineers and domain experts who conduct interviews |
Permission domains
Permissions are grouped into 19 resource domains. The full set of strings:
| Domain | Permissions |
|---|---|
| Organization | org:manage, org:view, org:delete |
| Members | members:invite, members:remove, members:view |
| Roles | roles:create, roles:update, roles:delete, roles:view |
| Questions | questions:publish, questions:update, questions:delete, questions:view, questions:approve |
| Templates | templates:publish, templates:update, templates:delete, templates:view, templates:approve |
| Job Positions | job_positions:create, job_positions:update, job_positions:delete, job_positions:view |
| Job Roles | job_roles:create, job_roles:update, job_roles:delete, job_roles:view |
| Candidates | candidates:create, candidates:update, candidates:delete, candidates:view |
| Interviews | interviews:assign, interviews:view_all, interviews:edit_all, interviews:conduct |
| Competencies | competencies:create, competencies:update, competencies:delete, competencies:view |
| Levels | levels:create, levels:update, levels:delete, levels:view |
| Billing | billing:manage, billing:view |
| Credits | credits:view |
| Offers | offers:create, offers:update, offers:send, offers:approve |
| Feedback Forms | feedback_forms:create, feedback_forms:update, feedback_forms:delete, feedback_forms:view, feedback_forms:approve |
| Scorecards | scorecards:view |
| Email Templates | email_templates:view, email_templates:manage |
| Careers | careers:view |
| Audit log | audit:view |
Creating a custom role
Walkthrough
Create a custom role
- Select Members in the sidebar, open the Roles tab, and select New Role.
- Enter a Name and, optionally, a Description.
- Check the permissions you want to grant.
- Select Save. The new role appears in the roles list with 0 members.
Assign a role to a member
You need roles:update to change a member's role. Admin holds it by default.
- Select Members in the sidebar.
- Open the action menu (⋯) on the member's row and select Change role.
- Choose the new role from the sub-menu. The change takes effect immediately — no re-login required.
Permissions reference
| Action | Permission | Default roles |
|---|---|---|
| List members | members:view | AdminStaffing |
| List roles | roles:view | AdminStaffing |
| Create role | roles:create | Admin |
| Update role / reassign member role | roles:update | Admin |
| Delete role | roles:delete | Admin |
| Remove member | members:remove | Admin |
| Create offers | offers:create | AdminStaffing |
| Update offers | offers:update | AdminStaffing |
| Send offers | offers:send | AdminStaffing |
| Approve offers | offers:approve | AdminStaffing |
Troubleshooting
"This is a system role. Permissions cannot be modified." — You opened Org Admin, Staffing or Interviewer. System roles are read-only. On the Scale plan, create a custom role with the permissions you need instead.
A member's row has no action menu — The organization owner's row never has one, because the owner cannot be removed or have their role changed from this page. Other rows show it only when you hold the permission for at least one of its actions: roles:update or members:remove for members, members:invite for invitations.
"Failed to update role" — The role change didn't go through. The role you picked may have been deleted in the meantime: refresh the page and try again.