Managing roles and permissions

Overview

Bi369 AI uses role-based access control (RBAC). Every team member is assigned a role that determines their permissions across all modules. You can use the built-in roles or create custom roles on Pro and Enterprise plans.

Built-in roles

| Role | Can manage billing | Can manage users | Module access | |---|---|---|---| | Owner | ✓ | ✓ | Full | | Admin | — | ✓ | Full | | Manager | — | — | Full (assigned modules) | | Member | — | — | Edit own records | | Viewer | — | — | Read-only |

Changing a team member's role

1. Go to Settings → Team Members
2. Find the team member
3. Click the role badge next to their name
4. Select a new role from the dropdown
5. The change takes effect immediately

Creating custom roles (Pro & Enterprise)

1. Go to Settings → Roles
2. Click New role
3. Give the role a name and description
4. Configure permissions for each module:
   • Full access — create, read, update, delete
   • Edit — create, read, update (no delete)
   • View — read-only
   • No access — module hidden
5. Click Save

You can then assign this custom role to team members.

Module-level overrides

In addition to the base role, you can restrict a team member to specific divisions (organisational units). For example, a Manager might have full access only to the "Sales" division, not HR or Finance.

Set this in Settings → Team Members → [Member] → Division access.

Auditing permission changes

All role and permission changes are logged in Settings → Audit Log. Each entry shows:

• Who made the change
• What changed
• When it happened

Related articles

• Inviting team members
• Audit log
• Division and department setup