Roles and permissions

A role is a set of permissions. Every member of your company holds exactly one role, and what they may see and do is what that role allows. The Roles screen (Administration > People & access > Roles) shows each role, how many members hold it and its permissions.

The built-in roles

  • Admin / Finance: always holds every permission and cannot be changed.
  • User: the everyday role for sales and account managers. By default it cannot change invoices, payments, prices, settings, members or imports.
  • Brand Manager: what User has, plus managing brands and brand material.
  • Brand Viewer: can only look at brands and brand material.

User, Brand Manager and Brand Viewer can be edited, and Reset to default puts back their original permissions. Built-in roles cannot be renamed or deleted.

Read the permission table

Permissions are grouped by area (Companies, Quotes, Invoices and so on), in the columns Read, Write, Delete and Special. Permissions marked Sensitive open financial data or an export. Hover over a permission, or read the text under it on a phone, to see what it allows.

Create a role of your own

  1. Select New role to start empty, or Clone next to a role to start from its permissions.
  2. Type a Name and, if you like, a Description. Select Create role.
  3. Tick the permissions the role should have. All ticks a whole area. Ticking a permission also ticks the ones it needs.
  4. Select Save and confirm with Save role. Members holding the role get the change on their next request.

A company can have up to 25 roles of its own. You can only grant permissions you hold yourself. Use Rename to change a custom role's name.

Delete a custom role

  1. Select the role.
  2. If members hold it, choose the role they move to in Move its members to.
  3. Select Delete role and confirm.

What a limited member sees

ASTRO hides what a member may not use: menu entries, Administration screens, buttons and the ? help for those screens. Opening a hidden screen by its address sends them to the dashboard. If someone says a button is missing, check their role here. Members can see their own role and its permissions on My profile.

Members who can see roles but not manage them see You can see this role but not change it.

Related