Reference
Permissions reference
Every permission key, what it allows, whether it is owner-sensitive, and which roles and presets include it by default.
On this page
Every permission in Unobits, what it allows, and which roles include it by default. Permissions marked ⚑ are owner-sensitive: only the Owner can grant or remove them.
Availability
- Grant and remove permissions
- the Owner, or anyone granted Manage permissions ⚑
- Where
- Admin → Access (
/admin/access)
The Owner holds every permission. The table shows what the other roles include before anything is granted individually. A tick means the role includes it; an empty cell means it must be granted. See Roles and permissions for how roles, presets and individual grants combine.
Messaging#
Every role, Members included, can send and read messages (messages.create, messages.read).
Opening company modules#
| Permission | Key | Allows | Admin | Manager | Member |
|---|---|---|---|---|---|
| View Socials | org.socials.view | View Meta conversations, comments, private replies, and the shared social inbox | ✓ | ✓ | |
| View Ads | org.ads.view | View paid ads, spend, campaign performance, and attribution dashboards | ✓ | ✓ | |
| View Projects | org.projects.view | View company projects, milestones, assignments, and delivery work | ✓ | ✓ | |
| View CRM | org.crm.view | View clients, leads, contacts, opportunities, and relationship records | ✓ | ✓ | |
| View Reach | org.reach.view | View outbound campaigns, mailboxes, templates, and follow-up flows | ✓ | ✓ | |
| View Finances | org.finances.view | View invoices, bills, revenue, accounting, and financial operations | ✓ | ||
| View Bookings | org.bookings.view | View reservations, availability, booking types, resources and booking pages, with customer details | ✓ | ✓ | |
| View Inventory | org.inventory.view | View stock, SKUs, purchasing, and inventory movement | ✓ | ||
| View Digital Twin | org.digital_twin.view | View operational dashboards, status boards, and live facility intelligence | ✓ | ||
| View Web Elements | org.web_elements.view | View company web overview, monitors, active elements, library, and the unified builder entry | ✓ | ✓ | |
| View Reports | org.reports.view | View company dashboards, analytics, and organization reporting | ✓ | ✓ | |
| View Client Portal | org.client_portal.view | View and manage company client-facing access portals and shared deliverables | ✓ | ✓ | |
| View Team Portal | org.team_portal.view | View shared internal team portal resources and company-wide workspaces | ✓ | ✓ |
People & access#
| Permission | Key | Allows | Admin | Manager | Member |
|---|---|---|---|---|---|
| Create users | users.create | Invite and create new users inside the organization | ✓ | ||
| Edit user profile and role | users.edit | Change basic user identity, role, and membership details | ✓ | ||
| Disable or re-enable users | users.disable | Temporarily suspend or restore user access | ✓ | ||
| Delete users ⚑ | users.delete | Permanently remove users from the organization | |||
| View users list | users.read.all | See all users in the organization | ✓ | ✓ | |
| View user details | users.read.details | See user roles, memberships, and permission details | ✓ | ✓ | |
| Create groups | groups.create | Create teams and groups | ✓ | ||
| Edit groups and memberships | groups.edit | Change group settings and membership | ✓ | ||
| Delete groups ⚑ | groups.delete | Remove groups from the organization | |||
| View groups | groups.read | Read group structures and membership | ✓ | ✓ |
Collaboration controls#
| Permission | Key | Allows | Admin | Manager | Member |
|---|---|---|---|---|---|
| Manage room/group membership ⚑ | conversations.manage.membership | Add or remove people from shared conversations or rooms | |||
| Delete conversations for everyone ⚑ | conversations.delete.everyone | Delete shared conversations for all participants | |||
| Delete messages | messages.delete | Delete messages in shared workspaces | ✓ | ||
| Pin messages | messages.pin | Pin important messages in shared spaces | ✓ |
Working in company modules#
| Permission | Key | Allows | Admin | Manager | Member |
|---|---|---|---|---|---|
| Manage Socials | org.socials.manage | Manage the social inbox, quick replies, automations, and comment handling | ✓ | ||
| Manage Ads | org.ads.manage | Create, edit, pause, resume, or archive paid ad campaigns and budgets | ✓ | ||
| Manage Projects | org.projects.manage | Create, edit, archive, or reassign company projects | ✓ | ||
| Manage CRM | org.crm.manage | Create, edit, and progress company CRM records | ✓ | ||
| Manage Reach | org.reach.manage | Edit campaigns, templates, and sender infrastructure | ✓ | ||
| Manage Finances ⚑ | org.finances.manage | Create or edit invoices, bills, accounts, and financial records | |||
| Approve bills ⚑ | finance.bills.approve | Approve finance bills and payouts | |||
| Submit expenses | finance.expenses.submit | Claim business expenses and follow their own claims, without access to Finance | ✓ | ✓ | ✓ |
| Approve expenses ⚑ | finance.expenses.approve | Review, approve or reject expense claims | |||
| Manage Bookings | org.bookings.manage | Make, approve, move and cancel bookings, and set up availability, booking types, resources and booking pages | ✓ | ||
| Manage Inventory | org.inventory.manage | Edit products, stock, purchasing, and transfers | ✓ | ||
| Manage Digital Twin | org.digital_twin.manage | Control operational twin configuration and automation | |||
| Manage Web Elements ⚑ | org.web_elements.manage | Control company web overview, active elements, library, builder, and deployment | ✓ | ||
| Manage Client Portal | org.client_portal.manage | Configure client-facing portals and shared access | ✓ | ||
| Manage Team Portal | org.team_portal.manage | Configure internal team portal structure and access | ✓ |
Security & integrations#
| Permission | Key | Allows | Admin | Manager | Member |
|---|---|---|---|---|---|
| Manage shared integrations ⚑ | org.integrations.manage | Configure organization integrations and shared sync settings | |||
| Disconnect shared integrations ⚑ | org.integrations.disconnect.shared | Disconnect shared org integrations like company calendar or shared drive syncs | |||
| Access admin console ⚑ | system.admin.access | Open and use the organization admin console | ✓ | ||
| Manage permissions ⚑ | system.permissions.manage | Grant or revoke route and action permissions | |||
| Manage organization settings ⚑ | system.settings.manage | Change company-wide settings and security rules | |||
| View audit trail ⚑ | system.audit.view | View security-sensitive admin and compliance logs | |||
| Export reports | system.reports.export | Export company reports and data extracts |
Presets#
A preset is a starting set of permissions for a job. Applying one sets the person's role and grants the permissions listed. Presets that include owner-sensitive permissions — Accountant, Designer, Developer, Marketer — can only be fully applied by the Owner.
| Preset | Role | Adds |
|---|---|---|
| Designer | Member | View and manage Projects, Web Elements ⚑ and Client Portal; view Reports |
| Accountant | Member | View Finances, Inventory and Reports; Manage Finances ⚑, Approve bills ⚑, Approve expenses ⚑, Export reports |
| Manager | Manager | View Projects, CRM, Reach, Ads, Reports, Team and Client Portal, Bookings; manage Projects and CRM; see people and groups |
| Developer | Member | View and manage Projects, Web Elements ⚑ and Digital Twin; view Reports |
| Marketer | Member | View and manage Socials, Ads, CRM, Reach and Web Elements ⚑; view Reports and Client Portal |
| Virtual Assistant | Member | View Socials, CRM, Projects, Team and Client Portal, Bookings; manage CRM and Bookings |
| Sales | Member | View CRM, Reach and Reports; manage CRM |
| Support | Member | View Socials, CRM, Projects, Client and Team Portal, Bookings |
| Operations | Member | View and manage Projects, Inventory, Digital Twin and Bookings; view Reports and Team Portal |
| Executive | Manager | View every company module, including Finances |
| Delegated Admin | Admin | The admin console for people and groups, without the Owner's most sensitive controls |
| Custom | Member | Nothing — pick permissions one by one |