Clear privileges: who can see, change, approve and export what
Set up roles from ready templates in plain words, or tick exactly what each role can do. Hide fields per role or make them read-only, and money and contact details a role cannot see are never sent to that person at all.
Included in every plan. No card needed for the trial.
What you get with Roles & permissions.
Tick boxes per module
Every role is a column. Each module has the actions it really has (View, Create, Edit, Delete, Approve, Export, Manage), with a level as a quick preset.
Scopes in plain words
Choose whose records a role reaches: only their own, projects they manage, their groups, direct reports, their whole team, their department or everyone.
15 role templates
Admin, Manager, Team lead, Accountant, HR, Sales executive, Support agent, Warehouse / packer, Store operations, Finance, Read-only auditor and more, shown as cards that say what they allow.
Field rules per role
Fields can be Visible, Read-only or Hidden for a role, and tabs, sections and widgets can be shown or hidden. A person can have their own exceptions.
Sensitive data never sent
Hidden costs, prices, rates, salaries, order totals and customer phone, e-mail and address are left out of pages, downloads and exports for that person. Packing slips print without prices.
Who can do what
By person, by permission or by action: every tick box with the roles that have it, the groups that add it and the people who can do it now, with exceptions marked and a CSV download.
View as
See one person's access in plain words, their menu as they see it and "Why?" for every module. It never signs you in as them.
Your roles, groups and exceptions
Build your own roles on a company role, give groups extra access, and allow or deny one thing for one person with a reason and an end date. A deny always wins.
Sensitive switches
Approve leave, approve time, see salaries and rates, see locations, export data and delete items are separate switches. Nobody can give themselves extra access.
Up and running in 4 steps.
- 1
Start in Simple mode
Open Settings → Roles & permissions and give each role a ready template, or let Guided setup create the starter roles for you.
- 2
Tick what differs
Switch to Advanced for the tick boxes, scopes and sensitive switches of each role.
- 3
Set field rules
On a role's Tabs & fields, make cost or customer details Read-only or Hidden, and check the summary before you save.
- 4
Check with View as
Open View as for one person, or Who can do what for everyone, and download it when someone asks.
Roles & permissions: common questions.
Are roles and field rules an add-on?+
Is a hidden field only hidden on screen?+
Can owners be limited?+
Does anything change when we upgrade?+
Can I see why someone can open a page?+
Does View as sign me in as the person?+
Try Roles & permissions free for 30 days.
Set it up with your own people and work. See pricing when you are ready.
Read next: Workspace designer · All features · Security