User Preferences Permissions

Note

📁 Permissions are namespaced, which is sort of like having files inside of folders.

The permissions listed on this page all belong to the user_preferences namespace. You can select them individually, or you can just select user_preferences to enable the whole bunch.

User preferences permissions are shown at the bottom of the New Role dialog…

…and give users access to the pages of their User Profile.

Permission name	Give access to	Note
user_preferences.access_token	Generate API tokens to control Zammad via REST API	Generated tokens will never have more permissions than the user that generated them.
user_preferences.appearance	Appearance configuration	Users can switch between dark, light and automatic mode.
user_preferences.avatar	Avatar settings	Override the default Gravatar with a custom avatar
user_preferences.calendar	Configure the calendar feed
user_preferences.device	Manage device login sessions	Revoking this permission disables “Login detected from a new location” emails. To learn more, see System Notifications.
user_preferences.language	Configure the UI locale/language
user_preferences.linked_accounts	Account linking	Manually link accounts after signing in with third-party authentication. Note: If automatic account linking fails, this is the only way users can utilize third-party logins.
user_preferences.notifications	Configuration of ticket notifications	Agents only receive ticket notifications for groups they have “full” access to. Customers can’t receive ticket notifications at all.
user_preferences.out_of_office	Designate a substitute for out-of-office hours	This does not grant that person the permissions / group access levels of the agent they’re replacing.
user_preferences.overview_sorting	Allow users to define their own overview order.	Optional permission; disabled by default. The order your user chooses here cannot be overwritten by admins. Renaming or resorting overviews has no effect on custom orders.
user_preferences.password	Change account password	Make sure to revoke this permission for all your users when using a third-party identity server (like LDAP) as your only allowed authentication method.
user_preferences.two_factor_authentication	Allow users to setup and configure their two factor authentication	Two factor authentication has to be enabled that users can setup and configure it.