Role permissions decide what each role can see and do in your portal. You set them once per role: a change applies to every admin, every team member or every client at the same time.
Use case: You run a creative agency. Clients should submit requests and see their invoices, but not change statuses. Team members should only see the requests assigned to them. Instead of giving everyone the same access, you switch these permissions on or off per role.
Where to find role permissions
Go to Settings > Modules and extensions.
On the Modules tab, open Users.
Under Permissions you'll find three sections: Admins, Team members and Clients.
Turn each toggle on or off, then click Save changes at the bottom of the page.
Only the portal admin can open this page. The portal admin always has every permission, so there is no section for that role.
Admins
Group | Permission | What it controls |
Billing | Invoices | If disabled, admins cannot create, view or mark invoices as paid. |
Team members
Group | Permission | What it controls |
Requests | Access all requests | If disabled, team members can access only the requests that are assigned to them. |
Requests | Create requests | If enabled, team members can create new requests on behalf of clients. |
Requests | Delete comments on requests | If disabled, team members cannot delete comments they left on requests. |
Requests | Comment on requests | If disabled, team members cannot comment on requests. |
Requests | Access request activity | If disabled, team members cannot view the Activity tab, comments, or comment attachments. |
Requests | Delete requests | If enabled, team members can delete requests they can view. |
Requests | Edit request assignees | If disabled, team members cannot add or remove the users assigned to a request, even on requests assigned to them. |
Requests | See request tags | If enabled, team members can see request tags. |
Requests | Manage request tags | If enabled, team members can manage request tags. Shown only when See request tags is on. |
Services | Manage services | If disabled, team members cannot access the list of services available in your portal. |
Users | Access team members | If disabled, team members cannot access the team members list. |
Users | Access all clients | If disabled, team members cannot open client profiles or create requests on their behalf. |
Users | Access managed clients | If disabled, team members cannot access clients they manage. Shown only when Access all clients is off. |
Users | Access reviews | If disabled, team members cannot see any reviews, including reviews of their own work. |
Reports | Access timesheet reports | If disabled, team members cannot access timesheet reports. |
Clients
Group | Permission | What it controls |
Requests | Access all requests | If disabled, clients only see requests they created themselves, not requests from others in their organization. |
Requests | Change request status | If enabled, clients can change request status. |
Requests | Submit requests | If disabled, clients cannot submit requests. |
Requests | See request priority | If disabled, clients cannot see request priority. |
Requests | Change request priority | If disabled, clients cannot change request priority. Shown only when See request priority is on. |
Requests | See request tags | If enabled, clients can see request tags. |
Requests | Manage request tags | If enabled, clients can manage request tags. Shown only when See request tags is on. |
Requests | See request assignees | If enabled, clients can see who a request is assigned to. |
Requests | Delete comments on requests | If enabled, clients can delete comments they left on requests. |
Requests | See request due date | If enabled, clients can see request due dates. |
Requests | Edit request due date | If enabled, clients can edit request due dates. Shown only when See request due date is on. |
Requests | Edit request fields | If enabled, clients can edit the fields in their requests. |
Requests | Clone requests | If enabled, clients can clone requests. |
Requests | Delete requests | If enabled, clients can delete requests they can view. |
Services | Block services and catalog access | If enabled, clients cannot view services or interact with the catalog page. |
Billing | Access invoices | If disabled, clients cannot access their list of invoices. |
Billing | Cancel subscriptions | If disabled, clients cannot cancel their subscriptions. |
Reports | Access timesheet reports | If disabled, clients cannot access the timesheet reports. |
Reports | Access credit reports | If disabled, clients cannot access the credit reports. |
Good to know
Some toggles only appear once the toggle they depend on is set. For example, Manage request tags appears after you turn on See request tags.
Approving and rejecting time entries is not a toggle here: the portal admin and admins can always do it. See time tracking.
These are access permissions. To choose which emails and in-app notifications people get, see How notifications work and how to edit notification settings.
More on each role: Team members and How to manage client permissions.