Not every teammate needs full admin access. Roles reduce accidental edits and data leaks.
- List who sells, who delivers, and who bills.
- Create or adjust roles under staff / roles settings.
- Grant only the modules each role needs (customers, invoices, projects, support).
- Review permissions after hiring or offboarding.
Practical splits
- Sales — leads, proposals, customers (limited delete).
- Delivery — projects, tasks, timesheets, files.
- Finance — invoices, payments, expenses.
- Admin — settings, staff, payment gateways.
Offboard promptly: deactivate staff who leave so portal and API access stop the same day.