The role that is configured as the default role would be the fallback role in the event other roles the users have been assigned are deleted. It is also the pre-selected role on the Access tab when new users are created.
If the users were created while the XYZ role was selected as the default global role, those users would likely already be assigned the XYZ global role. Once a user has been assigned a global role, you would need to assign them a new role rather than change which role is set as the default. To change the global role of a user, you can either select the role on the Administration > Users & Roles page or change the role when you edit a user account. Once a user’s global role has been changed, those changes are effective immediately and the user should observe the permissions enabled as soon as they refresh the page.
To configure a role to be set as the default, you would just need to check the default role checkbox on the Edit Role page and then save the role. This can be found under Administration > Users & Roles > Roles tab. After a role has been set as the global default, all new accounts created would have this role pre-selected on the Access tab as the global role.
Please note, as Bganger mentioned, users can also be assigned a separate role at the project level. This role would always override the global role for that particular project. If the user does not appear to have the appropriate permissions in a project, you can check the project level roles under Administration > Projects > Edit Project > Access tab.
You can also find more information about managing user roles on our website here:
If you are still unsure or are experiencing further issues with this, please reach out to the support team at email@example.com and we’ll be happy to help.