Roles and what each one sees

Access follows roles, so each person sees and changes only their part of the work. Where a role may not see cost or sale prices, those figures are redacted.

Roles belong to one workspace. Assign them in Settings → Users.

The roles

Role	What it does
Administrator	Everything in the workspace, including integrations, the role model and other administrators. Can require two-step sign-in for a person.
General manager	Everything an administrator can do except integrations and the role model. Cannot add or remove administrators.
Bookkeeper	Finance, payroll, every kind of document, intercompany settlement and the full cost and margin picture. Reads all operations, sale prices included, without editing the catalog or production.
Catalog editor	Edits products, attributes, SKU rules, media, collections, channels, feeds and sale prices. Reads stock and shared product files.
Sales manager	Edits customers, orders and the sales documents issued for them. Reads the catalog, stock and an order’s production status. Never sees purchases, suppliers or cost.
Production manager	Edits production, specifications, stock and materials, and reads production documents. Sees purchases without amounts, suppliers and worked hours. Never sees wage amounts, customers or sale prices.
Purchases manager	Edits purchases, suppliers and materials, and reads purchasing documents and purchase amounts. Reads stock, the catalog and a specification’s material demand. Never sees customers, orders or sale prices.
Approver	Approves or rejects changes that need a second pair of eyes. Added on top of another role.
Cost analyst	Read-only view of production cost and cost reports. No sales analytics, no profit and loss, never payroll. Added on top of another role.
Observer	Read-only across operations. No cost, finance, analytics, payroll or settings, and no sale prices, purchase amounts or documents with money.
Timekeeper	Logs and views only their own worked hours.

How roles combine

• Administrator and General manager stand alone. Each must be the only role on the person.
• Approver and Cost analyst never stand alone. Add them to a role that opens something to work on. Timekeeper only opens a person’s own hours, so it cannot carry them. Add a role such as Observer.
• Other roles can be combined.
• Only an administrator can grant or remove the administrator role, and the last administrator cannot be removed.
• Only an administrator can require two-step sign-in for a person. See Require two-step sign-in for a person.

Skipper

Every role except Timekeeper can use Skipper, the AI assistant. It reads only what the person can read and proposes only what they could do themselves.

Change a person’s roles

1. Open Settings → Users, open the person’s row menu and choose Roles.
2. Tick the roles and click Save changes. The message says “Roles updated.”

Their screens rebuild at once. A person whose permissions changed sees “Updating your access…”.

Related

• Invite people to your workspace
• Require approval for changes
• Change or remove someone’s access