---
title: "03. Assigning & Managing an Employee/User's Permissions"
slug: "03-assigning-amp-managing-an-employeeusers-permissions-1"
updated: 2026-08-27T20:05:03Z
published: 2026-09-23T12:59:57Z
canonical: "wiki.cobblestonesoftware.com/03-assigning-amp-managing-an-employeeusers-permissions-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://wiki.cobblestonesoftware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# 03. Assigning & Managing an Employee/User's Permissions

**COBBLESTONE SOFTWARE**

Contract Insight — User Guide

**03. Assigning & Managing an Employee/User's Permissions**

*03. Admin User Manual › Employee/User Permissions › 03. Assigning & Managing an Employee/User's Permissions*

**Note:** Each procedure in this guide begins at the Contract Insight homepage, so any section can be followed on its own. Custom fields are configurable, so the exact field list on a contract category record may vary between environments.

# 1. Overview

An individual employee's permissions can be reviewed and changed from Administration > **Employee Permissions**, described in the tool itself as letting an administrator "set one person's groups, permissions and departments." That screen starts with a search for the employee by name, username, or email; selecting a result opens their permissions-management view. Permissions themselves are defined once in **Manage User Permissions** and then granted either to a **Security Group** (so every member inherits it) or directly to one person, which is reflected in each permission's "**Granted to**" column (e.g. "2 groups, 2 people").

# 2. Key Elements

- Administration > **Employee Permissions** is the single-employee entry point: search by name, username, or email, then select the employee to review or change their groups, permissions, and departments together.
- **Manage User Permissions** (Administration > **Manage User Permissions**) is where each permission is defined once — its Area (e.g. Employee Details, Contract Task Details, Roles/Groups), what it lets someone do (Create/Add, Update/Edit, Read/View), and who it's currently **granted to**.
- A permission's "**Granted to**" value can name multiple security groups and/or individual people at once (e.g. "1 group, 1 person"), meaning a person can end up with a given permission either directly or through group membership.
- Each permission can additionally be narrowed with **Rules & conditions** (see "View Permissions by Record") so that even a granted permission only applies to a subset of that area's records.

# 3. Quick Reference Summary

[TODO: content needed]