Support Center

Custom Roles and Permissions

Custom Roles let Organization Owners and Admins grant specific capabilities to team members without promoting them to a higher base role. Instead of giving someone full Admin access, you can create a focused role like "Inventory Manager" that only grants the permissions they need.

How Permissions Work

Every Organization member has a base role (Owner, Admin, Member, or Viewer) that provides a default set of permissions. Custom roles add extra capabilities on top — they never take permissions away. This is called the additive model.

Example: A Member with a "Shift Manager" custom role keeps all their default Member capabilities, plus gains the ability to manage orders and access the Kitchen Display.

IMPORTANT

Custom roles can only add capabilities. They can never restrict or remove permissions that a member already has from their base role.

Accessing Custom Roles

  1. Navigate to your Organization management dashboard at /orgs/your-org-slug/manage.
  2. Click the Roles & Permissions tab.
  3. The Custom Roles editor displays all existing roles and a "Create Role" button.

NOTE

Only Organization Owners and Admins can create, edit, and delete custom roles. This requires the MANAGE_ROLES permission.

Creating a Custom Role

  1. Click + Create Role in the top-right corner.
  2. Enter a Role Name (e.g., "Inventory Manager", "Content Specialist").
  3. Optionally add a Description explaining what the role is for.
  4. Use the Permission Matrix to select which capabilities this role grants:
    • Permissions are organized into categories: Common, Administrative, Tour Operator, Restaurant, Photography, Author, Platform & Security, and Payouts & Revenue.
    • Click the category checkbox to select all permissions in a group at once.
    • Click individual checkboxes for fine-grained control.
  5. Optionally toggle Auto-assign to new members if you want this role applied to everyone who joins the Organization.
  6. Click Create Role.

TIP

If your Organization uses a specific vertical (e.g., Restaurant), you can quickly select all relevant permissions by clicking the category checkbox for "Restaurant". This selects View Orders, Create Orders, Update Order Status, and Access Kitchen Display in one click.

Editing a Custom Role

Click Edit next to any role to modify its name, description, or permissions. Changes take effect immediately for all members assigned to that role.

Deleting a Custom Role

Click Delete next to a role and confirm the action. All members currently assigned that role will immediately lose its extra permissions — they revert to their base role capabilities only.

CAUTION

Deleting a custom role is immediate and irreversible. All members with that role will lose its permissions instantly.

Assigning Roles to Members

Custom roles are assigned directly from the Members tab:

  1. Navigate to the Members tab in your Organization dashboard.
  2. Each member row shows a Custom Role dropdown (visible when custom roles exist).
  3. Select a role from the dropdown to assign it, or choose "No custom role" to remove the assignment.

NOTE

Each member can have one custom role at a time. Assigning a new role replaces the previous one.

Organization Limits

Each Organization can create up to 50 custom roles. The current count is displayed next to the "Create Role" button (e.g., "3 / 50").

Permission Categories

Category What it controls
Common Analytics viewing, product/service/order management
Administrative Member management, role management, team management, Organization settings, audit log access
Tour Operator Booking management, manifest viewing, guest communication
Restaurant Order viewing and creation, order status updates, Kitchen Display access
Photography Image uploads, gallery management, proofing access
Author Blog editing, product editing
Platform & Security Search, SSO, user management, analytics, webhooks, tags, billing
Payouts & Revenue Payout viewing and management, revenue viewing, commission management

Default Roles

You can mark one custom role as the default. When new members join your Organization, they automatically receive this role in addition to their base role. Only one default role can exist per Organization — setting a new default automatically clears the previous one.