Assigning roles to users

In the user list under Admin Controls & User Access, each row has a “Roles” button that opens a dialog where you pick exactly one system role (Admin or Employee) plus any number of custom roles as checkboxes. Current roles show as read-only chips in the table, and the last admin user in an organization can never be removed or downgraded.

The “Chef”/manager system role was removed from the product — there is no longer a built-in Chef role to pick in this dialog. The Chef-like behavior (someone only seeing and managing their own slice of the organization) is now achieved instead by creating a custom role and giving it an Access Area (Own / Reporting line / Custom filter / All) — see the “Custom roles & Access Area” manual entry in this group for how that works.