Roles and permissions
A permission authorises a specific action, such as approving evidence. A role is a set of permissions that you assign to the users on your team.
How it fits together
User ──► has one or more Roles ──► each Role groups Permissions
│
Your edition decides which features exist in your account (see Editions)
For someone to do something, both must be true: their role has the permission and your edition includes the feature.
What changes on screen
- Menu options appear only if the role has permission. If someone can't see a screen, the first thing to check is their role.
- Action buttons, such as Approve and Reject in evidence review, are hidden without the corresponding permission.
- Permissions are hierarchical: without the permission for the screen, the permission for an action inside it is of no use.
Roles that already exist
| Role | What it is for | Notes |
|---|---|---|
| Admin | Account owner | Has every permission in the account. |
| Comercial | Field staff | Can only link and create shops. See Field reps. |
| PartnerAdmin | Agency entering your account | Reduced subset of permissions, with no user management, billing or API keys. It can't be edited. See Tenant impersonation. |
You can create your own roles, for example "Marketing manager" with access to campaigns and messages but not to users.
Permissions with several levels
Some features separate viewing from acting. Evidence review, for example, can be viewed without being able to approve or reject. Grant the screen permission without the action permission to give read-only access.
Most common permissions
| Action | Permission (UI text) | Technical id |
|---|---|---|
| Manage roles | Roles | Pages.Administration.Roles |
| Manage users | Users | Pages.Administration.Users |
| Approve and reject evidence | Review and change evidence status | Pages.Evidence.Review |
| Delete a member's personal data | Member GDPR Erase | Pages.Members.GdprErase |
This list is not exhaustive: the full tree is on the roles screen.
Where to configure it
- Administration › Roles: create and edit roles, and tick their permissions on the Permissions tab.
- Administration › Users: assign roles to each person.
- For what each edition includes, see Editions and features.