Roles and permissions

A short walkthrough video is coming. The written steps below cover everything in the meantime.

The five roles

Every user has exactly one role. Roles are fixed (you cannot build your own), which keeps them easy to reason about. Pick the one that matches the person's job, not their seniority: a senior closer is still an agent.

Role	In one line	Typical person
Owner	Everything, including organization settings, pipeline settings and the plan.	The principal; usually one or two people.
Manager	All records, users and most settings, but not organization settings, pipeline settings or billing.	Sales manager, office manager.
Agent	Works their own leads and deals (or all of them, if the organization allows).	Sales reps, closers, fronters.
Processor	Documents, submissions and offers on every deal.	Processors, underwriting assistants.
Read only	Can look, cannot change anything, reveal sensitive values or export.	An accountant, an investor, a trainee in week one.

What each role can do

From the app's permission matrix
Can they...	Owner	Manager	Agent	Processor	Read only
Create and update leads	Yes	Yes	Yes	View only	View only
Import leads	Yes	Yes	Yes	No	No
Assign leads and deals to someone else	Yes	Yes	No	No	No
Convert a lead to a deal	Yes	Yes	Yes	No	No
Create deals	Yes	Yes	Yes	No	No
Update deals and merchants	Yes	Yes	Yes	Yes	No
Delete records	Yes	Yes	No	Documents only	No
Move a deal past a stage check (Move anyway)	Yes	Yes	No	No	No
Add and edit lenders	Yes	Yes	No	No	No
Build submissions and record offers	Yes	Yes	Yes	Yes	No
See commissions	All	All	Their own	No	Yes
Reveal masked values (SSN, EIN, bank numbers)	Yes	Yes	Yes	Yes	No
Export lists to CSV	Yes	Yes	Yes	No	No
Manage users and invites	Yes	Yes	No	No	No
Change organization and pipeline settings	Yes	No	No	No	No

Only an owner can make someone else an owner. Managers can invite and edit every other role.

Who sees which records

Agents are the only role limited by ownership. By default an agent sees the leads assigned to them, the deals and merchants they own, and the tasks, submissions, funded deals and commissions that hang off those. Owners, managers, processors and read-only users always see every record in the organization.

If your shop works as one team (reps cover each other's callbacks, say), an owner can turn on Agents can see every lead and deal in Settings → Organization under Team visibility. See Record visibility for when that makes sense.

Visibility follows assignment

An unassigned lead is invisible to every agent while visibility is restricted. If imported leads seem to vanish for your reps, check that the import assigned them to someone.

Sensitive values and exports

Social Security numbers, dates of birth and driver's license numbers on owners, EINs on merchants, and routing and account numbers on bank accounts are stored encrypted and shown masked (for example •••4821). Owners, managers, agents and processors see an eye button next to a masked value. Clicking it shows the full value for 30 seconds, then masks it again, and each reveal is recorded with who did it and when. Read-only users do not get the button.

Exports to CSV are open to owners, managers and agents, never include the encrypted values, and are recorded. Processors and read-only users cannot export.

Choosing roles well

Start with the least access that lets the person do the job; you can change a role any time in Settings → Users & invites.
Give processors the processor role even if they occasionally talk to merchants: it lets them work every deal without being able to reassign or delete.
Give every person their own sign-in. Shared logins make the activity history and the reveal records useless.
When someone leaves, deactivate them. Their records stay assigned to them until you reassign them.

Questions

Can I create a custom role?

No. There are five fixed roles: owner, manager, agent, processor and read only. Pick the closest one; the only per-organization switch is whether agents see every lead and deal or only their own.

Can agents see each other's leads?

Not by default. Agents see only the leads assigned to them and the deals they own. An owner can turn on Agents can see every lead and deal in Settings, Organization, Team visibility, and then every agent sees every record.

Try it in the app

Signed in? Open the screen this lesson covers.

Open Users & invites

Finished this lesson?

0 of 6 lessons in Start here

Progress is saved in this browser. Sign in to keep it across devices.