Every Site, Elevated.

Docs

Roles

Owners and admins of a workspace see and change everything. Everyone else, a member, has a role in each app, or No access, which says what they may see and change there. How a person gets access, field by field choices, templates, and staff tools are in Access and Permissions.

The Roles Each App Starts With

  • Manager sees and changes everything.
  • Team member works on their own customers and deals: sees and changes only the records they own, and deletes none.
  • Viewer can look, but can't change anything.

A member with no role in an app has No access there: the app is hidden from them and everything in it is refused. People added to your workspace start with No access in every app until you give them a role. Members who were on your team before kept everything they had: where they had no role, they were given one with everything. These roles can be changed, and a company can add its own.

What a Role Says

For each module of the app (or for every module at once):

  • View: own records, or all records.
  • Edit: none, own, or all. Adding records needs anything but none.
  • Delete: none, own, or all.
  • Import and export: yes or no.
  • Fields: each field Editable, Read only, or Hidden, and prices and amounts Hidden unless an owner chooses otherwise (Access and Permissions).

Record Owners

Each record has an owner: whoever added it, until someone gives it to another person. "Own" means the records a person owns. Giving a record to someone else (action core.records.set_owner) needs edit-all on that module.

A record someone may not see answers exactly as one that does not exist: it is not in lists or search, and opening, changing, or deleting it says it does not exist.

Apps' Own Rules

An app may hide some of its records from some people on top of roles, for example Helpdesk's admin-only inboxes. The rule is part of the app and applies the same way everywhere its records are shown.

Only owners and admins find records by their prices and amounts, and see them in Search results (permission core.view_pricing).

Managing Roles

In Settings, Permissions, on its Roles tab (the gear's Permissions opens it), owners and admins manage every app's roles, with Add a Role, Change, and Delete. It is the one place for them: each app's own Settings page links there (Apps). Who has which role is on the People tab, person by person (Access and Permissions). Owners and admins:

  • see each app's roles and who has them (action core.roles.list);
  • add or change a role and its levels (action core.roles.save);
  • delete a role (action core.roles.delete): people who had it have No access in that app until they get another role;
  • give a person a role in an app, or No access (action core.roles.assign), each change written in the Activity Log with whose access changed, from what to what.

For AI Agents

AI agents never change roles. An agent acts as the person who connected it, with that person's role.