Roles and permissions
Four ready-made roles cover most teams; the owner can build custom roles with exactly the permissions they need.
The four ready-made roles
| Role | What they can do |
|---|---|
| Owner | Everything, including managing users and deleting the company |
| Admin | Everything except deleting the company, including managing users |
| Member | Most features, without managing users or settings |
| Viewer | Read-only access to reports and dashboards |
Owners and admins see the Administrator settings: Company, Users, Contacts, Roles, Relations, Billing and Tickets.
Custom roles
In Settings → Roles, the owner can create a role from scratch, or Clone a ready-made one and change it. Give it a name (such as "Senior Accountant"), a description and a badge color, choose the level it starts from (admin-like, member-like or viewer-like), and turn individual permissions on or off.
Permissions are grouped by area: dashboards and KPIs, reports, each financial statement, the trial balance, mappings and categories, imports and connections, Ask Lou, company and personal settings, users, roles, billing, and company relationships.
Admins can see roles but not change them. The ready-made roles can't be edited, only cloned. A role can't be deleted while anyone has it.
Giving one person a variation
When inviting someone with a custom role, you can adjust the permissions for that person alone; Ask Lou saves it as a variant of the role.
Permissions are checked on our servers for every page and every action, not just hidden in the menus.