Roles and permissions
On Settings → Roles & permissions you control who can access what in the team. Every member has one role – the built-in Admin, Editor and Member, or a role of your own – and a role is a set of permissions given per module (for example Billing, CRM & Sales). The menu and the available actions follow these permissions. This is not the same as responsibility roles, which belong to approval policies.
Access has three layers:
- Role: every member has exactly one role. The system roles (Admin, Editor, Member) are ready to use and read-only; you can also create roles of your own.
- Permissions per module: permissions are grouped by module, usually split into View and Manage. When a module is switched off for the team, its permissions apply to no one.
- Custom permissions (optional): for an individual member you can grant or deny a permission differently from their role.
The team owner always holds every permission; no role or custom permission can take that away. Roles and members' permissions can be managed by anyone with Manage in the Settings module – by default the owner and the Admin role.
New members get the role marked Default; you can pick a different one when inviting.