The right access for the responsibility.
Give people the access they need for the job they do.
For owners and authorised administrators managing collaboration and sensitive business records.
Invite the right person
Create a workspace invitation for the intended email address.
Verify and join
The recipient uses the exact invited verified email and the supported single-use invitation flow.
Review access over time
Use Employee self-service for own payslips and Leave only. Keep Staff or other operator roles for work such as projects, CRM or POS; review access as responsibilities change.
An invitation is workspace-scoped and expiry-aware. Employee self-service is seat-exempt only on the new versioned plans; existing subscriptions keep their seat terms. Do not use shared credentials or broaden sensitive access simply to work around a permission error.
How do team invitations, roles and privacy work?
Each business has an Owner. Invite team members with Admin, Manager, Accountant, Staff or restricted Employee self-service access, within your own role’s team-management permissions. Employee self-service only opens their own explicitly linked finalised or paid payslips and Leave, alongside personal account details. On new versioned plans it does not use an operator seat; Staff and Accountant still do. Existing subscriptions retain their original seat terms. Dashboards and business tools follow the role; personal leave and payslips require their respective employee links. Invitations are tied to the exact invited verified email, expire, and are single-use. Authentication, membership and server-side permissions scope access to business records. Review access as responsibilities change. These controls are not a claim of a specific security certification or a guarantee against every security risk.
A dashboard for every role.
Owner
Dashboard: Finance work queues, sales and accounting overview, team and invitation counts, leave reviews and stocktakes. The owner also sees subscription status, renewal and team/customer usage.
Business access: Manage business settings, team access, subscription and billing, finance, payroll, leave, projects, CRM, catalogue, stocktakes and POS. Approve proposed task-status changes.
Admin
Dashboard: Finance and operating overview, reconciliation and invoice/expense queues, team and invitation counts, leave reviews and stocktakes.
Business access: Manage day-to-day business settings, finance, payroll, projects, CRM, catalogue, stocktakes, POS and leave. Manage Manager, Staff, Accountant and Employee self-service memberships and employee self-service links. Billing and task-status approval stay with the owner; Admins cannot manage Owner or Admin memberships.
Manager
Dashboard: Workspace-wide active projects, open and overdue tasks, seven-day deadlines, active team members and leave requests awaiting review, alongside permitted operating counts.
Business access: Manage projects and tasks, team CRM work and POS sales, refunds and cash-up; view the team and catalogue, and review team leave. Task-status changes need owner approval. Business finance/payroll management, the Customers management area, billing, settings, team management, catalogue editing and stocktakes are restricted. CRM financial values remain restricted.
Accountant
Dashboard: Reconciliation, overdue/draft invoice and unpaid-expense queues, posted journals, finance and operating overview, team counts and leave reviews.
Business access: Manage customers, sales documents, expenses, banking, accounting/reporting, payroll and leave. View team, catalogue, projects and CRM, including permitted CRM financial values, lead conversion and quote creation. Billing, business settings, team/project administration, catalogue editing, stocktakes and POS selling/refunds/cash-up are restricted.
Staff
Dashboard: Workspace-wide project and open-task counts, seven-day deadlines and overdue tasks. The broader business and finance dashboard is hidden.
Business access: View workspace projects, join discussions and propose task-status changes for owner approval. Work with own or assigned CRM records, view the active catalogue and sell through POS. Business finance, other employees’ payroll, team administration, billing/settings, POS refunds/cash-up, catalogue editing and stocktakes are restricted.
Employee self-service
Dashboard: Only personal payslip and Leave panels. No business metrics, work queues, team activity or finance overview.
Business access: Access only their own explicitly linked finalised or paid payslips, their own linked Leave records and requests, and personal account details. No projects, CRM, POS, accounting, billing, team administration or AI tools. Employee self-service does not consume an operator seat on the new versioned plans. Existing Staff and Accountant roles still use operator seats; existing subscriptions retain their original seat terms.
Every role can see My leave when linked to an active employee for Leave, and My payslips only through a separate explicit employee access grant. Payslips show only that person’s finalised or paid records. An email match or Leave link alone does not grant payslip access. Linked employees can request leave, manage their own pending requests and review available, used and accrued balances as of the displayed date. No one can approve or decline their own leave.
Access follows the selected business, active membership, relevant plan features and record-level checks. Dashboard counts do not grant access to every underlying record. Operator roles also see their permitted quick actions and recent activity. Employee self-service remains personal-only.