Roles and fields
Each person, the right reach.
Roles decide which records a person reaches. Fields decide what they read in them.
Seven roles, ready.
Owner to External, from the first day. Your own, built from them, where your plan includes it.
Settings · Roles
OwnerEvery right1
AdminRuns the organization1
Billing AdminPlans and invoices1
ManagerTheir team's records2
MemberTheir own records4
ViewerReads, never writes1
ExternalOutside people, with an end date1
Record by record.
View, edit, delete or write to: all records, a team's, or only their own.
Manager · Object permissions
ViewEditDelete
DealsTeamTeamOwned
CompaniesAllTeamOwned
InvoicesTeamOwnedNone
QuotesTeamTeamOwned
Field by field.
Edit, View, Masked or Hidden for each role. A masked phone shows a hint, never the number.
Contact · Phone · Field access
OwnerEdit
ManagerEdit
MemberView
Accounts+1 ••• ••• ••42Masked
ExternalThe property does not exist for themHidden
Check before you trust it.
View as user says whether a person can see a record, and why.
View as user
Lena OrtizMember · Deal
This member can see this recordBecause: A manual share grants them read access
Priya NairMember · Deal
This member cannot see this recordBecause: No grant reaches them for this record
Give each role its reach.
Start with the seven built in.