Roles and Permissions

Understand capabilities by role and permission scope on ArtInStack.

Roles bundle what a teammate can open in the dashboard. Owners manage billing, Subscription, and Teams; authors often edit Posts and Media; editors and managers can review posts and publish. Assign least privilege—contractors do not need Settings or billing unless their job requires it.

Client portal administration (Portal Manager) is part of the Education module, not the Teams module—only grant it to roles that should invite clients.

Prerequisites

Dashboard → SettingsTeams (role column)

Verify effective access: sign in as teammate or compare sidebar items

Core architecture & fields

Teams tab: role label per member, Edit role action.
Effective permissions: visible sidebar items; denied routes show permission or upgrade messaging.

Implementation steps

  1. Open SettingsTeams and read role descriptions if the UI shows them.
  2. List what an owner can access versus an author (Pages, Products, Projects, Posts, Settings, etc.).
  3. Sign in as a teammate (or ask them to screen-share) to verify restricted areas stay hidden.
  4. Document internally who may Publish versus draft-only, if your workflow distinguishes that.
  5. Never share the owner password—use invites and role changes instead.
  6. Review SettingsPrivacy & security for session policies that affect team logins.
  7. Revisit roles when someone changes jobs or finishes a contract.

What you'll see

You can map business titles to platform roles and assign access without exposing billing or client portal administration to every collaborator.

Verifying your setup

  • Role differences are documented for your workspace.
  • Teammate permissions were verified in the live UI.
  • Owner credentials are not shared with the team.