What it is
Roles in Members & Roles now go far beyond “which categories can this role touch.” Every category gets a clear Edit / No access switch, and you can still fine-tune it permission by permission if you need to. On top of that, a role can be limited to specific investees, specific facilities, and specific custom categories — so an admin can build a role as narrow as “can edit one facility’s data in one child company” instead of always granting access across the whole organization.
Only administrators — or whoever owns the role — can change these settings, and editing a shared role’s rights from a member’s profile updates that role for everyone who holds it, with a clear warning before you do.
What you can scope a role to
- Categories — Environmental, Social and Governance, General, and Other actions, each with a bulk Edit/No-access switch plus the full list of individual permissions underneath.
- Investees & facilities — pick exactly which child companies and facilities a role can see or edit. Leave everything unchecked to keep it applied across the whole organization, just like today.
- My categories — the custom categories your team has created can be scoped the same way, once the role has editing rights to custom categories at all.
How it works
Open Manage Roles to create or edit a role, or edit a member’s role directly from their profile — both use the same picker. Each category shows an Edit/No-access switch; expand it to check or uncheck individual permissions. Below that, an investee/facility tree lets you narrow the role’s reach, and — if the role can touch custom categories — a checklist of your organization’s real categories appears so you can pick exactly which ones apply.
Leaving a scope empty always means unrestricted, matching how roles already work today — so nothing changes for existing roles until an admin deliberately narrows one.
Why it matters
As organizations grow — more child companies, more facilities, more people — “everyone with edit rights can edit everything” stops being good enough. Now you can hand a facility manager exactly the facility they run, give a regional lead exactly their investees, or share one custom category with the one team that owns it — without opening the door to everything else.