Roles and permissions explained

What the six default roles can do, how a role decides what each person sees, and how discount limits work.

ConceptUpdated

Each person has exactly one role, and the role decides what they can see and do. A permission is one switch, for example See profit or Refund payments. Your agency starts with six roles that you can adjust, except the owner.

The default roles

Role What it can do Discount limit
Owner Everything, always. Cannot be changed or removed. No limit
Manager Everything except Manage the team, Manage roles, Export all data and Manage the plan and pay invoices. Sees every branch. 15%
Sales Dashboard; leads; quotations; see, create and edit bookings (not cancel) and give discounts; see trips and hotels; move guests between rooms; customers and travellers, with full passport numbers; the inbox; see, upload and send documents; tasks; see and record payments. 5%
Operations Dashboard; see bookings; build and publish trips; hotels and contract rooms; move guests between rooms; see customers; travellers, with full passport numbers; all document permissions; departures and manifests; tasks; suppliers and their costs; see supplier costs and margins. 0%
Finance Dashboard; see bookings, customers and trips; every payment permission (record, refund, approve reported transfers, gateway log and reconciliation); invoices and e-invoices, with Settings → E-invoicing (ZATCA); suppliers and costs; profit; reports and their export, with a read-only Settings → Accounting. Sees every branch. 0%
Viewer See the dashboard, bookings, trips, hotels, customers, reports and profit. Cannot change anything. 0%

The full list of permissions, with what each one opens, is in the appendix: Permissions and default roles.

How permissions work

  • One role per person. Roles do not add up: to give someone more, change their role or the role's switches.
  • What you cannot use, you do not see. Menu items, tabs and buttons that need a permission you lack are hidden or greyed out. A salesperson can sell a package without ever seeing what the agency paid for it, because See supplier costs and margins and See profit are off for Sales.
  • "See" and "manage" go together. A permission that changes something (for example Add and edit customers) is most useful with its "see" partner (See customers) switched on too.
  • The owner is special. The Owner role always has every permission, even new ones added later. Only an owner can invite, change, disable or reset another owner, and the agency always keeps at least one active owner.
  • Changes are quick. When you change a role, everyone who has it gets the change the next time their page loads, and the change is written to the audit log.
  • Branches limit what a role sees. Unless a role has See and work in every branch, people see only their own branch: Branches and who sees what.

Discount limits

The permission Give discounts lets a person lower the price of a booking. Its limit, up to … %, is the highest discount as a share of the booking total.

For example, with the Sales limit of 5%, a salesperson can take up to BHD 50 off a BHD 1,000 booking. If they type more, the booking is refused with Your discount limit is 5%. A manager can give up to 15%, and an owner has no limit. Change the limits in the Give discounts row of the grid: Create or change a role.

Note

Promo codes and portal offers do not count against this limit. They have their own rules in Offers.

Related articles