Roles and permissions
Every person has one role in each company they belong to, and one role in each module they can open in that company. Each grant is independent: someone can be an Editor in Catalog for one company and a Viewer in Intelligence for another, so access mirrors the work people actually do.
Company administrators assign roles when adding people and change them from the person's card in Settings > Users.
Company roles
| Role | What it allows |
|---|---|
| Admin | Manages the company's users, roles and module access, and opens the company's pages in Settings: Users, Plan, Atomo and Connections. The company always keeps at least one. |
| Billing | For invoices and payments. Doesn't manage users and doesn't see the company's pages in Settings. |
| Member | Uses the modules they have been given. |
Module roles
Each module has its own roles, named after the work people do in it.
Catalog
| Role | What it allows |
|---|---|
| Admin | Store settings, attributes, integrations and feature access; everything editors can do. |
| Editor | Creates and edits products, categories and price lists, within the features the admin enabled. |
| Viewer | Can browse the catalog, cannot change anything. |
Commerce
| Role | What it allows |
|---|---|
| Admin | Configures Commerce and sees every ticket and order. |
| Agent | Works tickets and orders. |
| Viewer | Can look, cannot act. |
Customer care also has its own teams and roles inside Commerce. See Roles and access.
Intelligence
| Role | What it allows |
|---|---|
| Admin | Manages datasets, metrics and reporting settings; everything analysts can do. |
| Analyst | Builds and edits dashboards and widgets. |
| Viewer | Reads dashboards, cannot change them. |
Brain
Brain has a finer set of roles for sales, projects and websites: Owner, Admin, Sales Manager, Sales Rep, Project Manager, Specialist, Content Editor, Web Manager and Read-only. Each one opens different sections of Brain. See Users and roles.
Working with a read-only role
When your role in Catalog, Commerce or Intelligence is Viewer, a notice at the top of the module says so. You can browse everything, and actions that would change data aren't offered. In Brain, the equivalent role is Read-only: it can view, but not edit.
If you need to make changes, ask an administrator of your company to change your role.
Who can change roles
| Change | Who can make it |
|---|---|
| Add people, remove them from the company, change company roles | People with the Admin company role. |
| Give, change or revoke access to a module | People with the Admin company role, for every module of the company. |
| Request a plan change, set up Atomo for the company, choose which modules use a connection | People with the Admin company role. See Settings. |
| Manage Brain's users from inside Brain | People who administer Brain. See Users and roles. |
| Activate a new module for the company | The Nucleo team, according to your plan. |
Considerations for roles
- Nucleo won't let you demote or remove the last Admin of a company. Appoint another Admin first.
- Role changes apply immediately. If the person has Nucleo open, they see the new access when they reload the page.
- Atomo always works with the permissions of the person using it: it can't do anything their role doesn't allow.
- Removing someone from a company never deletes their account. Their history stays, and so does their access to other companies.