Roles & Permissions

Control who can do what in your workspace with a visual role hierarchy and granular permissions.

Open Role Management#

1. Click Business in the sidebar
2. Click Role Management

This page is restricted to admins and owners.

Default Roles#

Every workspace starts with three protected roles:

• Owner (Level 0, highest) — Everything — manage billing, delete workspace, manage roles
• Admin (Level 1) — Most things — manage members, configure settings, invite users
• Member (Level 2) — Read + basic create/update — use tasks, chat, files

These roles cannot be renamed or deleted.

Role Hierarchy Canvas#

The role management page uses a visual canvas where roles are displayed as cards. Drag roles vertically to change their hierarchy level.

• Roles higher on the canvas have more authority
• Hierarchy determines which users can manage which roles
• Protected roles (Owner, Admin, Member) are locked in position

Create a Custom Role#

1. Click Create Role on the role management page
2. Fill in:
   • Role Name
   • Description
   • Hierarchy Level (or drag on the canvas)
3. Configure permissions per resource (see below)
4. Click Create

Permission Categories#

Each role has granular permissions across these resources:

• Tasks — create, read, update, delete, admin
• Finance — create, read, update, delete, approve, export
• Invoices — create, read, update, delete, approve, export
• Transactions — create, read, update, delete, approve, export
• Members — create, read, update, delete, invite, approve, export
• Teams — create, read, update, delete, invite, approve, export
• Files — create, read, update, delete, export
• Clients — create, read, update, delete, invite, export
• Reports — create, read, update, delete, export
• Chats — create, read, update, delete
• Bookkeeping — create, read, update, delete, approve, export
• Accounts — create, read, update, delete, admin
• Categories — create, read, update, delete
• Inventory — create, read, update, delete
• Tax — create, read, update, delete
• Metrics — create, read, update, delete
• Resources — create, read, update, delete

Assign Roles to Members#

1. Open Role Management
2. Click on a role card
3. Click View Members
4. See all users assigned to this role
5. Use User Management to change a user's role

Or assign from User Management:

1. Go to Business → Users
2. Click a user
3. Change their Role from the dropdown

View Role Members#

The Role Members modal shows:

• All users with that role
• Their avatars, names, and join dates
• Option to change individual roles

Permission Guards in the UI#

The app automatically hides or disables features based on your permissions:

• Menu items you can't access are hidden
• Action buttons (create, delete, export) appear only if you have permission
• Entire sections (like billing) are gated behind role checks

If something is missing from your view, check with your workspace admin about your role's permissions.