Customize roles and permissions

A role is a named bundle of permissions, Manager, Designer / Salesperson, Finance / Bookkeeper, and the like. The permission grid is where you decide exactly what each role can do. Get this right once and every teammate you add inherits the correct access from their roles.

Before you start

• You need the permission to manage roles (the Admin / Owner role has it).
• Changes take effect the next time an affected teammate loads a screen, so it is worth a quick heads-up if you are removing an ability people rely on.

Set what a role can do

1. Open Admin, then Roles & permissions.
2. You are looking at a grid: a column per role, a row per permission. Tick or clear the boxes in a role’s column for the abilities it should have.
3. Click Save at the bottom of that column.

Repeat per role. The Admin / Owner column is a wildcard, always every permission, so it has no boxes to change.

Grant one person an exception

When a single person needs one extra ability but the whole role should not change, do not widen the role. Instead:

1. Open Admin, then Users, and Edit the person.
2. Add the ability under Direct grants. It applies to just them, on top of their roles.

Good to know

• Permissions decide which screens and actions a role reaches. To hide or lock specific fields (like profit or commission numbers) for a role that otherwise has access, use Field access.
• A person can hold more than one role; their access is the union of all of them, plus any direct grants.