Roles and permissions
Create and adapt permission profiles and restrict people within a project.
Settings → Organization → Roles and permissions. Only admins open the page and assign profiles.
How rights work together
Three things determine what someone may do:
- The person’s permission profile: which areas they use and how far their rights in projects can go at most.
- The project role (project lead, sales, backup, read only), which you set in the project.
- An optional restriction of the person in a project.
The lowest always applies. Admins always have full access and are never restricted. Employees without their own profile have ‘Sales rep’. Locked areas remain visible to the person, greyed out, with an explanation of which permission is missing.
The page
On the left are the profiles, on the right the selected one:
- Admin is fixed. The card shows who is an admin. It cannot be changed.
- Sales rep, Team lead and Viewer are supplied with Leadmode (in the list as ‘Default’). You can change them and reset them to the defaults with Reset. Deleting is not possible.
- You create your own profiles with New profile (at most 30). In the dialog you enter the name and choose under ‘Start with the rights of’ an existing profile as a basis. Then you set each area individually.
Each profile carries a description and the list ‘People with this profile’. Whom you assign it to is decided during inviting or in the employee list.
Editing a profile
| Field | Effect |
|---|---|
| Name | At least two characters |
| Description | What the profile is meant for |
| Project role for new project assignments | Suggested when someone with this profile is assigned to a project |
| Areas | Switch or selection per area, see below |
| Menu items | One switch per sidebar menu item, grouped by area: everyone with this profile sees these. New profiles start with the previous default view, and duplicating also copies the selection. The menu only hides and does not change rights (see Menu and design). |
The buttons at the top right: Duplicate, for supplied profiles Reset, for own profiles Delete. If people still have the profile, when deleting you choose another profile to which they move (‘Delete and assign’).
Changes only apply after Save in the bar ‘Unsaved changes’. Discard reverts them. Under ‘What this profile allows’ you see a summary.
Some rights depend on others. If you switch on ‘Issue documents’, for example, Leadmode also switches on ‘Finance’ and tells you so in a note. Nothing is switched off in the process.
Areas and levels
Levels: No access, View, Edit, Manage. Many areas only know on or off.
Organisation
| Area | Scope |
|---|---|
| Organisation and defaults | Change design, flows, outcomes, fields, website and landing page defaults |
| Team | See employees, functions and assignments |
| AI and credits | View; Manage: see usage, manage AI access |
Sales and technology
| Area | Scope |
|---|---|
| Manage projects | Create and delete projects and change the staffing of all projects |
| Staff scheduler | The planner in Staff scheduling. View: see the planner of your own projects and teams. Plan: create, change and move rows and bars of your own projects and teams. Requires ‘Team’ (View). Does not open personnel files, remuneration or administration |
| Lead sources and integrations | Set up lead sources, Instantly and other integrations |
| Set up telephony | Access, numbers, conference, accompany the team’s calls |
| Shared mailboxes and email design | Organisation mailboxes, footer, templates |
| Team analytics | View: key figures, recordings, tasks; view and book: additionally book appointments for others |
Finance
| Area | Scope |
|---|---|
| Finance | See documents of your own projects |
| Issue documents | Issue and send offers, orders and invoices |
| Record payments | Record incoming payments against invoices |
| Catalogue and billing details | Maintain items, templates and the invoicing party |
| Documents of all projects | See documents from projects you do not work on |
| Accounting | View: journal and reports. Book: additionally confirm postings, assign bank transactions, maintain suppliers, subscriptions and refunds |
| Set up accounting | Change the chart of accounts, tax keys, assignments and accounting settings |
| Closing and export | Lock months and reopen them, export data for the tax adviser |
| Submit documents | Submit your own incoming documents and expenses and see their status |
| Approve documents | Check, approve or reject submitted documents and expense reports of all employees |
People and compensation
| Area | Scope |
|---|---|
| Recruiting | Applications, positions, careers page |
| Personnel files and contracts | Files, contracts, questionnaires, employee documents |
| Compensation | Remuneration rules and billing |
At most allowed in projects
Here the profile sets the upper limit. What someone may actually do also depends on the project role.
| Area | Levels |
|---|---|
| Leads and work list | View, Edit, Lead |
| Calendar | View, Edit, Lead |
| Flow and outcomes | View, Change |
| Reports and review | View, Manage |
| Import and export | Export, Import |
| Files | View, Edit |
| Edit project | Allowed |
Supplied profiles
| Profile | Meant for |
|---|---|
| Sales rep | Works in their own projects: leads, calls, appointments and their own documents |
| Team lead | Like sales rep, plus team analytics, appointments for others, issuing documents, recording payments and planning social media posts (as project lead, also approving them in their own project) |
| Viewer | Sees projects, leads and appointments, changes nothing |
Project role
You set the project role in the project staffing of a project. Each role allows at most:
| Role | Leads | Calendar | Flow | Reports | Import/export | Files | Edit project |
|---|---|---|---|---|---|---|---|
| Project lead | Lead | Lead | Change | Manage | Import | Edit | Allowed |
| Sales | Edit | Edit | View | No access | Import | Edit | No access |
| Backup | Edit | Edit | View | No access | Import | View | No access |
| Read only | View | View | View | No access | Export | View | No access |
Restricting within a project
In the project staffing, each person has the button Restrict. There you lower individual project areas below the rights of the role, for this project only. The option ‘As role: …’ leaves the area unchanged. A restriction never gives more rights; for that, choose another role.