# Role

The `Role` family — 7 operations.

A role is a named bundle of permissions granted per organization. Give people roles rather than one-off rights, and access stays explainable.

## Operations

| Operation | Kind | What it does |
| --- | --- | --- |
| [createRole](/reference/role/createRole/) | mutation | Create a new role — a named bundle of permissions at your organization. |
| [deactivateRole](/reference/role/deactivateRole/) | mutation | Deactivate a role — a named bundle of permissions — it stops being usable but keeps its history and can be reactivated. |
| [doomRole](/reference/role/doomRole/) | mutation | Permanently retire a role — a named bundle of permissions. |
| [reactivateRole](/reference/role/reactivateRole/) | mutation | Reactivate a role — a named bundle of permissions — bring a deactivated record back into use. |
| [role](/reference/role/role/) | query | Look up one record — a role — a named bundle of permissions. |
| [roles](/reference/role/roles/) | query | The role list — each entry is a role — a named bundle of permissions. |
| [updateRole](/reference/role/updateRole/) | mutation | Edit a role — a named bundle of permissions — change its details. |