Roles group the actions a colleague can perform. Access also depends on workspace membership, selected company, and the feature's own authorization checks.
Review roles
Check role permissions before inviting a teammate or changing their access.
Open Workspace → Roles. The directory lists active application roles, descriptions, and permission counts. Use View to inspect a role.
The current workspace presents role inspection as its standard table action. Role creation and editing depend on the installed configuration and authorized administration controls. If the action you need is unavailable, ask your workspace administrator to manage the role.
Assign access
Choose an active role when inviting a colleague. Review the permissions actually attached to that role; a name such as “Manager” or “Viewer” does not guarantee a fixed permission set.
When changing responsibilities, review both role permissions and company memberships. Test access with the intended user's role so you can confirm they can perform the required work without exposing unrelated company data.
CRM, Helpdesk and mobile visibility
CRM, customer records, individual fields, exports and integration management have distinct permissions. Helpdesk membership is not a workspace-role invitation, and CRM access does not grant Helpdesk access. Subscription features and staff grants are both required where applicable.
The native app also checks current server permissions. CRM can remain visible without existing deal data; Helpdesk, forms, bookings and commerce add their documented company-data gates. See Native mobile workspace. A hidden tab is only presentation: APIs, downloads, workers and webhooks still enforce current access.