Assigning users multiple roles

You can assign multiple roles to a user. Permissions belonging to roles are additive, meaning the user assigned with multiple roles receives all of the permissions afforded by the assigned roles. Consider the following scenarios:

• If one role allows a user to only create articles, while another role allows a user to create only sections, then a user with both roles can create both articles and sections.
• Similarly, if one role allows a user to only create new articles, while another role allows a user to only archive articles, then a user with both roles can both create and archive articles.

See the table below for more information on how multiple roles interact.

Condition	Behavior
When multiple content forms are set for a certain type...	The first content form on the first role set on the user will be used. For example, if Role A includes a content form that hides the Internal Name field for an article, but Role B does not, then if Role A is set before Role B, the editor will not see that field when creating a new article.
When multiple content templates are set for a certain type...	The first content template on the first role set on the user will be used. For example, if Role A includes a content template that populates the Headline field for an article with Brightspot News:, and Role B populates that field with Brightspot Insider:, then if Role A is set before Role B, the editor will see Brightspot News: when creating a new article.
When only one role has two-factor authentication enabled...	Two-factor authentication is not required.
When only one role has read-only access after publishing...	Assets of the designated content type are read-only after publish, even if another role does not include this restriction.
When roles have different dashboards...	Both dashboards are displayed for the editor, separated by tabs.