An admin can grant one person a permission their role does not normally hold. Until now that grant was honoured in some places and not others: the person was let through to the page, and then sent straight back to their dashboard the moment it loaded, with nothing to explain why. The grant looked applied on the permissions screen and did nothing where it mattered.

Grant a permission now and the pages behind it open. Give someone tenant configuration and they reach settings, land on a tab, and can work through general settings, locations, commercial terms, SLAs, coverage, automations, integrations, the setup checklist and demo data, plus the metrics page. Give them catalogue management instead and they get exactly the services, products and industries tabs — the tabs they cannot use are not shown to them at all, rather than shown and then refused.

The same now holds for invoice approvals and for the setup assistant: a person granted either reaches the work rather than the door.

Nothing changes for anyone without an individual grant. Every role sees precisely the pages, tabs and landing screens it saw before, and a permission nobody was given still opens nothing. Admins viewing the product as another person continue to see exactly what that person sees.