Role Template Management
Create, edit, assign, and manage Role Templates across your integrations.
Published Date: May 1, 2026 | Last Updated: May 28, 2026
Overview
Role Templates define the access a User should hold across one or more connected integrations. When a Role Template is assigned to a User, Tello IAM enforces those permissions in every application the template covers. This article covers creating, editing, assigning, and removing Role Templates.
For guidance on how to design a Role Template structure before building in the platform, see Role Template Structures.
Important: Assigning a Role Template to a User fully overrides that User's previously detected permissions in every application the template covers. This is not a merge — it is a replacement. Any access the User held that is not included in the assigned template is removed at the time of assignment. Verify that each template is complete before assigning it to Users.
Navigate to Role Templates
Navigate to Role Templates in the left navigation. The page lists all Role Templates currently configured in the platform. Select any template to view its details, edit it, or manage User assignments.
Create a Role Template
Role Templates can be created from scratch or built from an existing User's detected permissions. Using detected permissions is recommended when a User already holds the access the template should represent — it reduces manual entry and ensures the template reflects real-world access.
Option A: Create from a User's detected permissions
- Navigate to Users and select the User whose detected permissions best represent the template being built.
- Select the three dots menu and select Create Template from User.
- Enter a name in the Template Name field. If using a role-to-role design, the name should match the HR role it represents — for example, a Sales Manager HR role maps to a template named Sales Manager.
- Review the detected permissions pre-populated into the template. Add, remove, or adjust integrations and permission levels as needed.
- Select the Users to assign to this template.
- Review that all information is correct and select Submit. All assigned Users receive the template permissions in the associated applications immediately. The template appears in the Role Templates list.
Option B: Create from scratch
- Navigate to Role Templates.
- Select + Add Template.
- Enter a name in the Template Name field.
- Add integrations and configure the permission level for each.
- Select the Users to assign to this template.
- Review that all information is correct and select Submit. The template appears in the Role Templates list.
Edit a Role Template
Edits to a Role Template take effect for all Users assigned to it. Before modifying a template, consider which Users will be affected and confirm the changes are correct for all of them.
- Navigate to Role Templates and select the template to edit.
- Select Edit.
- Modify the template name, integrations, or permission levels as needed.
- Select Save. Tello IAM applies the updated permissions to all assigned Users immediately.
Assign a Role Template to a User
Users can be assigned to a Role Template during template creation or at any time afterward.
To assign a template to a User after creation:
- Navigate to Users and select the User.
- In the Access Grants tab, locate the Role Templates section.
- Select Add Role Template.
- Select the template to assign from the list.
- Select Confirm. Tello IAM applies the template permissions immediately.
Alternatively, a template can be assigned from within the template itself:
- Navigate to Role Templates and select the template.
- In the Users section, select Add Users.
- Select the Users to assign and select Confirm.
Multiple templates: A User can hold more than 1 Role Template simultaneously. In a role-to-role design, each User typically holds 1 template that covers everything their function requires. If the organization uses a mixed structure — for example, a job function template combined with an application-specific template — a User may hold several. Confirm that no 2 assigned templates define conflicting permission levels in the same application for the same User.
Remove a User from a Role Template
Removing a User from a Role Template removes all access that template was providing in the covered applications. Confirm the User does not need that access, or that it will be covered by another template or direct assignment, before removing.
- Navigate to Role Templates and select the template.
- In the Users section, locate the User to remove.
- Select the remove option next to the User and confirm.
Alternatively, the template assignment can be removed from the User record directly:
- Navigate to Users and select the User.
- In the Access Grants tab, locate the template under Role Templates.
- Select the remove option and confirm.
Delete a Role Template
Deleting a Role Template removes the template from the platform and removes all access it was providing to assigned Users. This action cannot be undone.
Before deleting a template, review which Users are assigned to it and determine whether their access needs to be covered by a different template or direct assignment.
- Navigate to Role Templates and select the template to delete.
- Select Delete.
- Confirm the deletion. The template is removed and assigned Users immediately lose the access it was providing.
Related articles
- Role Template Structures — design approaches, principles, and the role matrix
- Getting Started Part 6: Configuring Role Templates — guided walkthrough for first-time setup
Seasoft Security Solutions LLC | TelloIAM