Users and Roles in the Admin Portal
Other languages
How the Users and Roles screens work — who uses Claira, one role per person, what each role may do, and how permission enforcement is switched on.
Users and Roles in the Admin Portal
Two screens work together. Users lists everyone who uses Claira in your organization and the role each person holds. Roles defines what each role may do. Assigning is done on Users; permissions are edited on Roles.
The Users screen
- Every person who has used Claira in one of your cases appears, with their email and the cases they are on.
- Last active is the last time the person opened Claira or ran something in it — a scan, bulk task, prompt, Insight, chat or field migration. Discover logins are shown separately; hover the column header for the definition.
- Sync from Discover refreshes the list from your Discover portals, so names and emails match Discover. It runs by itself several times a day; use the button when you need it now.
- The role dropdown on each row assigns a role. A person who has no explicit role is a User.
- Access review downloads a CSV of who holds which role, granted by whom and when — the export auditors ask for.
An organization always keeps at least one Organization admin; the portal refuses to remove the last one.
Built-in roles
| Role | What it is |
|---|---|
| Organization admin | Everything, including the portal itself, billing, users and roles. New permissions Claira adds later are included automatically. |
| User | The default for everyone: everyday scanning, prompts, Insights and Agent Mode — no deletion, no billing changes, no portal access. |
You can add your own roles — a Billing contact or a Case manager, for example — and pick their permissions from the full list.
The Roles screen
- Choose a role on the left to see and edit its permissions, grouped by area (cases, billing, Insights, fields, scans, bulk tasks, prompts, Agent Mode, Case Context, field migration, settings, feedback, email).
- Permissions marked tokens spend the case's tokens; destructive ones reach past the person running them; irreversible ones cannot be undone. A few are decided by Discover and cannot be set in Claira.
- Save applies the change to everyone on the role. Changing a role signs its members out of the portal; they pick up the change on their next visit to Claira.
- A permission marked Not yet enforced is recorded on the role, but no action in Claira checks it yet; it takes effect when its check ships. The enforcement card at the top of the screen says how many permissions Claira checks today.
Switching enforcement on
Roles are recorded first and honoured later:
- Assign roles on the Users screen and check that every admin holds Organization admin.
- On the Roles screen, switch Enforce permissions on.
Until enforcement is on, nothing changes for your users — the portal only records roles. With it on, actions a role lacks are refused inside Claira in Discover with a clear message — for the permissions Claira checks today. The Roles screen marks the others Not yet enforced; they stay recorded on the role and take effect when their checks ship. You can switch it off again at any time.
Case access is still Discover's
The Discover permissions described in Users and Permissions still decide who can open a case and see Claira's fields. A Claira role never grants case access; it only decides what someone may do with Claira once they are in.
Need help? Contact us at support@claira.to.
Was this page helpful?
Continue reading
Cases in the Admin Portal
The Overview and Cases screens — every case Claira has been activated in, with plan, reservoir, usage and lifecycle dates, and the detail page for one case.
Billing and Invoices in the Admin Portal
The partner invoice per window, how each case is billed, cards held by Stripe, pending plan changes, the invoice parameters, and the billable flag.
Need more help?
Contact our support team at support@claira.to — we are here to help.