Team Roles & Permissions
Every team member is either an Admin or a Member. Roles decide who manages the workspace; rights decide what a Member can view or edit.
Roles
Admin
- Full access to every feature and every conversation
- Manages team members, departments and rights
- Manages billing, WhatsApp connections, API keys, webhooks and integrations
- The person who created the workspace is the owner: they can transfer ownership but cannot be demoted or removed
Member
- Sees and replies to conversations assigned to them
- Creates and updates contacts, deals, tasks, and sales pipeline stages
- Blocked from deleting contacts/deals, merging duplicates, CSV imports, and pipeline restructuring
- Cannot open team, billing, WhatsApp, API key or integration settings
Read-Only (Viewer)
- Read-only access across contacts, deals, tasks, timeline activities, and reporting dashboards
- Blocked from any write, create, update, or delete operations (returns HTTP 403 Forbidden)
- Ideal for auditors, executive leadership, or external stakeholders who only require visibility
Rights: View and Edit
Each module (Inbox, Contacts, Campaigns, Templates, Automations, Flows, Analytics) has a separate View and Edit right, and Edit needs View. By default a Member can view and edit everything except Analytics, which is view-only. Three actions are off until an Admin allows them because they cost money or are hard to undo: sending or scheduling campaigns, exporting contacts and campaign logs and bulk deleting contacts.
Departments
Create departments under Settings → Team members → Departments, set their rights once, and put members in them. A member's own override (the shield button on the Members tab) always wins over their department, and a department wins over the default. Each right can be set to Inherit, Allow or Deny.
Best Practices
- Keep the number of Admins small
- Use departments for groups of people and overrides only for exceptions
- Review members periodically and remove people who have left