Getting started

Roles and permissions

What each role can do, and how tenant isolation is enforced beneath them.

3 min read

The roles

Owner: full control including billing, members and deletion. Admin: configuration, senders, campaigns and reports. Member: create and send campaigns. Viewer: read-only access to reports.

Enforcement

Roles are stored separately from profiles and checked by the database on every query, not just hidden in the interface. A user without a role in your organisation cannot read a single row of your data, whatever request they craft.

More in Getting started

All guides