Users & Roles
Manage administrators and their permissions.
Available in
| Resource | Starter | Professional | Business | Enterprise |
|---|---|---|---|---|
| Admin Users | 2 | 5 | 15 | 50 |
User and role management enables fine-grained control of access rights. Each admin is assigned a role that determines which modules and actions they can access.
Manage Users
-
Create User - Add new administrator with name, email, and role assignment
-
Assign Role - Control permissions via role assignment
-
Reset Password - Send password reset email or set a new password
-
Disable User - Lock access without deleting the account
-
2FA Status - See which admins have two-factor authentication enabled
Security Suggestions
The admin list highlights potential issues:
-
Without 2FA - Admins who have not set up two-factor authentication
-
Without Role - Admins not assigned to any role
-
Hidden Admins - Admin accounts that are deactivated
Define Roles
-
Create Role - Define a new role with a name and description
-
Assign Permissions - Select which modules and actions are allowed for this role
-
Default Roles - Pre-configured roles: Super Admin, Admin, Staff, Read-Only
Permission Matrix
Visual overview of all role permissions:
-
Matrix View - See all roles vs. all permissions in a single grid
-
Grouped by Module - Permissions organized by module (events, contacts, invoices, etc.)
-
Quick Comparison - Compare permissions across roles side by side
Permission Types
-
View - Read and list data
-
Create - Create new entries
-
Edit - Modify existing entries
-
Delete - Remove entries
-
Manage - Access settings and configuration for the module
Tips
- Grant only the minimum necessary permissions (principle of least privilege)
- Super admins always have full access regardless of role settings
- Changes to roles affect all assigned users immediately
- Use the permission matrix view to audit role configurations
Notes
- At least one super admin must always exist
- You cannot restrict your own role permissions
- Deleted roles will unassign affected admins - reassign them promptly