User Roles & Permissions

Overview

The platform uses a role-based access control (RBAC) system to manage user permissions and ensure secure access to different features and data. Each user is assigned a specific role that determines what they can see and do within the system.

Available User Roles

Admin

Full system access - The highest level of permissions available.

Admins can:

• Access all platform features and settings
• Manage company profile and configuration
• Create, edit, and delete promotions and products
• Manage all user accounts and permissions
• Access financial and reporting data
• Configure integrations and API settings
• Manage shipping and payment settings
• View and manage all claims and customer data

Moderator

Limited administrative access - Can manage most operational aspects.

Moderators can:

• Create and edit promotions and products
• Manage claims and customer interactions
• Access reporting and analytics
• Manage shipping and fulfillment
• Update company branding and content
• Cannot manage user accounts or company settings

Support

Customer-facing operations - Focused on customer service and support.

Support users can:

• View and respond to customer inquiries
• Process claims and customer requests
• Access customer data and order information
• Update claim statuses
• Cannot create or modify promotions/products
• Cannot access company configuration settings

Role Assignment

User roles are assigned during the invitation process by company administrators. When inviting new team members:

1. Send Invitation: Admins can invite users via email
2. Assign Role: Choose the appropriate role for the user
3. Set Permissions: The system automatically applies role-based permissions
4. User Acceptance: Invited users complete registration and accept their role

Permission Management

Permissions are automatically managed based on user roles. The system ensures that:

• Users can only access features appropriate to their role
• Sensitive company and financial data is protected
• Operational tasks can be delegated to appropriate team members
• Audit trails track all user actions for security

Best Practices

Role Assignment

• Assign the minimum necessary permissions for each user
• Regularly review and update user roles as responsibilities change
• Use the Support role for customer service representatives
• Limit Admin access to trusted team members only

Security Considerations

• Never share admin credentials
• Regularly audit user access and permissions
• Remove access for departing team members immediately
• Use strong passwords and enable two-factor authentication Coming soon

Next Steps

Now that you understand user roles and permissions, you can:

• Invite team members with appropriate roles
• Set up your company structure and team
• Delegate tasks based on user capabilities
• Ensure secure access to platform features