Hey, I’m unable to edit the "Tenant admin" role in my project. When I try, I only see the “Duplicate” option, even though the docs says editing should be possible. Could you please help?

Hi, I'm Descope's AI assistant. I've put together an initial response below based on your question. Where Are You Trying to Edit the Role? The behavior differs based on whether you're using the Descope Console or a Role Management Widget. Scenario 1: Editing via the Descope Console If you're in the Authorization > RBAC section of the Descope Console, the

Tenant Admin

role is editable. You can: • Change its name • Add or remove permissions • Set it as a default or hidden role To access these options, click the three-dot menu next to the role name. If you're only seeing Duplicate, double-check that your Descope account has Project Admin or Company Admin privileges, as lower-privileged console roles may have restricted access. Scenario 2: Editing via the Role Management Widget If the

Duplicate

-only behavior is happening inside an embedded Role Management Widget in your app, this is expected and by design. According to the documentation: • The

Editable

field in the Role Management Widget is determined by the user's access to the role. • Project-level roles are not editable by tenant-level users. For more information, you can refer to the following resources: • Role-Based Access Control | Descope Documentation • Admin Widgets | Descope Documentation

Hi @Sapir Thanks for reaching out. The reason you're only seeing Duplicate for the "Tenant Admin" role is that it's a built-in system role in Descope — these roles are protected by design and cannot be directly edited, regardless of your account permissions. Here's the recommended approach if you need a customized version: 1. Click Duplicate on the "Tenant Admin" role. 2. Rename the duplicated role (e.g., "Custom Tenant Admin"). 3. Edit that copy — you can add/remove permissions, set it as a default role, etc. 4. Assign users to the new custom role as needed. This way you retain the original "Tenant Admin" as a system baseline while having full flexibility over your custom version. If you're running into this inside an embedded Role Management Widget, note that project-level roles are also non-editable by tenant-level users by design — so the same workaround applies. Let me know if you have any questions!