Roles and Permissions
Invite roles are manager, editor, author, and viewer. Combined with modules, they control the sidebar. The workspace owner manages Settings, billing, and Access invites. Prefer least privilege for contractors.
Access uses modules and role together. Modules set which dashboard areas appear (Pages, Posts, Media, and so on). Role sets what someone can do inside those areas. The workspace owner manages Settings, Subscription / billing, and membership on Access.
Invite roles:
| Role | Typical use |
|---|---|
| Manager | Lead work inside granted modules (Projects coordination, editorial lead). Settings and billing stay with the owner. |
| Editor | Edit, and often publish or review, within granted modules |
| Author | Create and edit own content (for example blog drafts) within granted modules |
| Viewer | Read-only within granted modules |
Portal Manager (client portal administration) belongs to the Education / client delivery path. Run portal invites from there when that capability is on the plan.
Prerequisites
Dashboard → Settings → Access (role and modules columns)
Verify effective access: sign in as teammate or compare sidebar items
Core architecture & fields
Access tab: role and modules per member; Edit to change either.
Effective permissions: sidebar follows modules; actions follow role. Denied routes show permission messaging. Invitees use General as their hub and Edit profile for personal identity.
Implementation steps
- Open Settings → Access and review each member’s role and modules.
- Map business titles to platform roles (for example “blog writer” → author + Posts module).
- Prefer least privilege: grant only the modules they need; use viewer for read-only seats.
- Sign in as a teammate (or ask them to screen-share) to confirm Settings and billing stay hidden.
- Document who may Publish versus draft-only, if your workflow distinguishes that.
- Use invites and role or module changes instead of sharing the owner password.
- Review Settings → Privacy & security for session policies that affect team logins.
- Revisit roles and modules when someone changes jobs or finishes a contract.
What you'll see
Business titles map to platform roles and modules while billing and site Settings stay with the owner.
Verifying your setup
- Role and module differences are documented for your workspace.
- Teammate permissions were verified in the live UI (sidebar matches modules).
- Owner credentials stay with the owner.
