Platform
Team, Roles & Permissions
Organizations, brands, roles and the permission model that governs every module.
Organizations and brands
Every user belongs to exactly one Organization, which can hold several Brands. Any user in your organization can access any of your brands — a role determines what they're actually allowed to do, not which brands they can see.
Roles and where they apply
A role can be granted at different levels depending on its kind:
The owner role is locked
The organization-owner role has every permission and is assigned exactly once, automatically, when the organization registers. It can never be granted to another user through the invite or access-management flow.Inviting a teammate
Inviting someone by name, email and username creates their account immediately and emails them a temporary password — there is no separate pending-invite state to accept or decline. They're required to set their own password the first time they sign in.
How access is checked day-to-day
What shows up in the sidebar and what a user is allowed to click both come from the same permission check per item — a user only sees a whole section of the app if at least one thing inside it is actually permitted for them.
Related
New to managing your team? Start with the guide.