# Roster Management permissions

**URL:** <https://forum.inductiveautomation.com/t/roster-management-permissions/17611>\
**Category:** Ignition\
**Created:** [April 5, 2018, 2:09pm UTC](https://forum.inductiveautomation.com/t/roster-management-permissions/17611 "2018-04-05T14:09:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tim](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/tim/32/3361_2.png) [@Tim](https://forum.inductiveautomation.com/u/Tim)\
**Post date:** [April 5, 2018, 2:09pm UTC](https://forum.inductiveautomation.com/t/roster-management-permissions/17611/1 "2018-04-05T14:09:10Z")

</div>

When attempting to add a user to an On-Call Roster via the Roster Management component in the client I receive a message within the component “Save failed. the current user does not have the required roles for this operation.” And In the gateway logs a message " Method Method has permissions disabled for id user. User x denied permission."

I can add users via the gateway or on the same screen when open in the designer without issue. Where can I adjust this?

Ignition 7.9.5

---

<div class="post-metadata">

**Author:** ![KathyApplebaum](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kathyapplebaum/32/7261_2.png) [@KathyApplebaum](https://forum.inductiveautomation.com/u/KathyApplebaum)\
**Post date:** [April 5, 2018, 3:20pm UTC](https://forum.inductiveautomation.com/t/roster-management-permissions/17611/2 "2018-04-05T15:20:50Z")

</div>

You need to give the designer access to user management by going to the Gateway’s config page, and choosing system \> gateway settings and checking ‘allow user admin’

[https://docs.inductiveautomation.com/display/DOC79/Managing+Users+and+Roles](https://docs.inductiveautomation.com/display/DOC79/Managing+Users+and+Roles)

---

<div class="post-metadata">

**Author:** ![Tim](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/tim/32/3361_2.png) [@Tim](https://forum.inductiveautomation.com/u/Tim)\
**Post date:** [April 5, 2018, 4:37pm UTC](https://forum.inductiveautomation.com/t/roster-management-permissions/17611/3 "2018-04-05T16:37:47Z")

</div>

Thanks Kathy. It sounds like this applies when using the same user source as your gateway, in my case I have a dedicated user source for the project. With the Allow User Admin setting on or off it does not change my issue.

---

<div class="post-metadata">

**Author:** ![Tim](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/tim/32/3361_2.png) [@Tim](https://forum.inductiveautomation.com/u/Tim)\
**Post date:** [April 5, 2018, 5:23pm UTC](https://forum.inductiveautomation.com/t/roster-management-permissions/17611/4 "2018-04-05T17:23:15Z")

</div>

Found it was due to relevant client permissions disabled by default under the Project Properties. This is a newer feature I had not previously explored.

---

<div class="post-metadata">

**Author:** ![KathyApplebaum](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kathyapplebaum/32/7261_2.png) [@KathyApplebaum](https://forum.inductiveautomation.com/u/KathyApplebaum)\
**Post date:** [April 5, 2018, 6:05pm UTC](https://forum.inductiveautomation.com/t/roster-management-permissions/17611/5 "2018-04-05T18:05:52Z")

</div>

Ah yes. The client permissions are on by default for legacy projects, but off by default for new projects. Usually the one people hit first is database access. 🙂