The right people, the right screens.
Access is set at two levels. The business decides who belongs to the company. Each channel decides what those people can do with that brand.
- Custom roles
- One permission grid
- Owner access cannot be removed
Two layers of access that match how teams work
At the business level, people are Owner, Admin, Member or Accountant. Admins manage users and settings. Accountants see billing only. When you invite someone, you choose which channels they can reach: all of them, or just one.
At the channel level, the IAM and Admin screen lists every principal: the people with access to that channel and their role. Channel roles start as Owner, Admin, Editor, Sales, Support and Viewer, and you can create your own.
Permissions are shown as one grid. Rows are areas of work, columns are roles, and a tick means that role can use that area. You can see the whole picture on one screen.
Giving someone access
Invite them to the business
Enter their email, pick a role and the channels they can reach, and add a personal message. They need a User ID.
They accept
The invitation shows exactly what their role can and cannot do, and what the business will see about them.
Set their channel role
In IAM and Admin, add them as a principal by email or User ID and choose a role.
Adjust the grid if you need to
Tick or untick areas for a role, or create a new role starting from an existing one.
Remove access in one step
Removing a principal takes effect immediately. They lose access to that channel straight away.
Where you will find it
Sketches of the real screens in the panel, with the names you will see on them.
View by principals or by roles. Each principal shows email, role, date modified and status.
Channel › IAM and AdminThe permission grid for the channel. The Owner role always has full access and cannot be changed.
Channel › RolesEveryone in the business with their role and channel access. Invite, change a role or remove someone.
Business › UsersWhat you can set, and where the edges are
The plain facts, so nothing surprises you later.
| Setting or rule | How it works |
|---|---|
| Business roles | Owner, Admin, Member and Accountant. |
| Channel roles | Owner, Admin, Editor, Sales, Support and Viewer to start with, plus any you create. |
| Custom roles | Give it a name and a description, and start from an existing role. |
| Permission areas | Leads and contacts, Orders and sales, Catalog, Content and pages, App builder, Users, Settings and billing, Passwords. |
| Per-app access | Each app’s settings have an Access tab to choose which roles can use it. |
| Owner | Always has full access. The owner’s role cannot be changed from the users screen; ownership is transferred from Settings. |
| Timing | Removing someone is immediate. A changed role takes effect at their next page load. |
| Invitations | Expire after 14 days if not accepted. |
Roles and permissions: common questions
Can I create my own roles?
Can someone work on one channel but not another?
What does an Accountant see?
How quickly does removing someone work?
Can the owner be locked out by an admin?
Bring your businesses under one roof
Create your User ID, add a business and open your first channel. Install only the apps you need.