Team, roles & permissions
Logins vs employees, the built-in roles, custom roles, and own-only access.
Team vs Employees
| Team | HR → Employees | |
|---|---|---|
| What | Login accounts and their roles | People records: contracts, leave, payroll, documents |
| Who manages | Administrator / Owner | HR |
| Link | A login may be linked to an employee for self-service | An employee may have no login at all |
Built-in roles
Profile menu → Roles & Permissions. Every company starts with:
| Role | What they can do |
|---|---|
| Owner | Everything |
| Administrator | Everything except ownership of the company |
| Member | Work in all licensed modules, no approvals |
| Viewer | Read-only (plus HR self-service) |
| HR Manager | Manage and approve HR, read master data, analytics |
| Sales Manager | Manage and approve Sales, see every agent's documents, read inventory |
| Sales Agent | Own quotations, orders, invoices and POS receipts |
| Procurement Manager | Manage and approve Procurement, read inventory |
| Field Technician | Execute assigned work orders, read assets, partners and products |
| Shop Floor Operator | Confirm production operations |
| Driver | Vehicles, routes and cargo manifests |
| Portal Client / Portal Supplier | Portal access only |
Custom roles
Create a role and tick permissions one by one. Each module lists its resources with read / create / update / delete, and where relevant approve, post or execute. A role can only grant permissions inside the modules your company is licensed for.
Own-only vs view-all
Sales roles without View all see only documents where they are the sales agent. Approvers always see what is waiting for them in My Approvals.
Inviting people
Profile menu → Team → Invite: e-mail plus roles. The person receives a link, sets a password, and is in. Suspend or remove access from the same page.
Role changes apply at next login
After you change someone's roles, ask them to log out and back in.