# New this month: FGA Custom Roles, Groups API, Self-serve Change Email… Canonical: https://brew.new/browse/templates/email/pt1_k97ssgxn1f7dwhh74dn8qfkz7d8e5rs7 Brand: workos.com Category: newsletter ![Preview of New this month: FGA Custom Roles, Groups API, Self-serve Change Email…](https://cdn.brew.new/email-preview-5b2985abd32a8281-tracking_r57rey4c7qaw5qy2nzjh7vqgv58dv6vz-1789016753919.png) ## Email content WorkOS WorkOS New this month FGA Custom Roles, Groups API, Self-serve Change Email API, & more FGA Custom Roles Custom roles can now be scoped to specific resource types like workspaces or projects, in addition to applying organization-wide. The dashboard now features a refreshed custom roles UI for managing roles and permissions. Learn more about FGA → Groups API Group organization memberships together using the new Groups API. Make named groups to organize users by team, department, or organizational unit, and manage group memberships through the API. Group organization memberships → Self-serve Change Email API New API endpoints support allowing users to change their own email address with built in verification and fallback. Users can initiate the email change but need to verify the new email address before their email address is updated. Check out how to an send email change code and confirm an email change in the docs. See how to change emails → IT Contacts The Admin Portal now supports collecting and managing multiple IT contacts, previously known as organization admins. Enable collection from Configuration > Emails in the Dashboard. When enabled, Admin Portal setup flows — including SSO, Directory Sync, and certificate renewal — will include a step to collect an IT contact email. After setup, users can view and manage their IT contacts list from the Admin Portal post-configuration page. Organizations can now have up to 20 IT contacts, up from one. You can manage this list yourself in the dashboard under an organization's settings page. You can also pre-populate contacts when generating an Admin Portal link via admin_emails. Generate a portal link → More featured content WorkOS joins Stripe Projects. Provision auth from the CLI in one command. Register for MCP Night: Agent Mode on May 21st in SF at the Regency Ballroom. Learn how to secure agentic apps with scoped, revocable credentials and tool-level authorization. If you have any feedback or feature suggestions, simply reply to this email. Unsubscribe from all WorkOS marketing emails WorkOS 548 Market Street PMB 86125 • San Francisco, CA 94104 [Open and remix this design](https://brew.new/browse/templates/email/pt1_k97ssgxn1f7dwhh74dn8qfkz7d8e5rs7) [Browse email designs](https://brew.new/browse/templates)