Open the Denied Actions tab on the Role screen.
If you need to remove a specific user ability to perform certain functions, you can revoke their access to any of the toolbar buttons.
E.g. If a user should not be able to create a task, then select Add New Task under the 'Actions' column.
Users under this role will now not be able to create new tasks within paradigm.
