Roles and what each can do
Back to the guide
Everyone in a firm has one of four roles. Your role decides which buttons you see and which actions are refused, and it is set by an owner or admin under Settings → Team.
| Viewer | Analyst | Admin | Owner | |
|---|---|---|---|---|
| Read deals and scores | yes | yes | yes | yes |
| Upload deals, record verdicts | yes | yes | yes | |
| Read the CRM | yes | yes | yes | yes |
| Add and edit CRM records | yes | yes | yes | |
| Add or change CRM fields and objects | yes | yes | yes | |
| Read the buy box | yes | yes | yes | yes |
| Change the buy box | yes | yes | ||
| Read the banker directory | yes | yes | yes | yes |
| Pull from a banker source | yes | yes | ||
| Connect your own mailbox | yes | yes | yes | |
| Set the firm's email filters and visibility | yes | yes | ||
| Invite and remove people | yes | yes | ||
| Restrict records, manage teams | yes | yes | ||
| Make somebody an owner | yes | |||
| Manage API keys | yes | yes | ||
| Delete the firm, manage billing | yes |
How to read it
Viewer is read-only almost everywhere. A viewer can see deals, scores, the CRM and the banker directory, but cannot change any of them. The Emails section is hidden for viewers, because connecting a mailbox is not something they can do.
Analyst is the working role for most of the team. Analysts do the day to day: upload deals, record verdicts, create and edit records, add fields, connect their own mailbox. They cannot change the buy box, invite people, or restrict records.
Admin adds the firm-level controls: the buy box, invitations, email filters and visibility, restricting records, teams and API keys.
Owner adds the three things that must not be delegated. Only an owner can make somebody else an owner, delete the firm, or manage billing.
Two things worth knowing
Owners see every restricted record. When a record, list or object is restricted to particular people, owners are exempt. That is deliberate, and it is why handing out the owner role is itself restricted to owners: an admin who could promote themselves would be able to grant themselves that exemption.
Permissions follow the action, not the screen. A thing you cannot do stays refused however you reach it, whether that is a button, the import wizard or the API. An API key is never more powerful than the person who created it.