Permissions lookup

Admin → Permissions lookup answers the opposite question from the user page. There you see what one person holds; here you see who holds one permission. Use it when you want to know who can delete events, see sensitive personal data or export payroll — before an audit, or when someone can do something they should not.

Running a lookup

Pick a permission under Permission and press Run lookup. The list shows every active user who effectively holds it, with their primary role and Grant sources: which role, group or direct grant the permission comes from, or whether it follows implicitly from being a stage manager, production administrator or group head.

The summary above the table says how many of the active users hold the permission. If the list is empty, no grant exists — check that the role or group you think gives it actually does.

Effective, not just assigned

The lookup resolves the permission the way the app itself does, source by source. A user listed here can perform the action today, whichever way the grant arrived.

Disabled accounts are left out. To see what they held, go to the audit log.