Every team member has one of four roles: staff, manager, admin or owner. Add a permission profile or a one-off grant for extra access, and limit staff to the locations they work.
Staff handle bookings, customers, the calendar and taking payments. Managers add refunds, pricing, customer export and damage charges. Admins add team management, settings, the audit log and API keys. Only the owner can make someone an admin.
Build permission profiles from 49 permissions in 17 areas and give one to a person. A profile adds permissions on top of their role and never removes any. Actions that need a higher role still need that role.
Assign staff to the locations they work. Bookings, inventory and list pages are checked on the server against those locations, and owners and admins see every location.
Only the owner can make someone an admin, and nobody can change the access of someone ranked above them.
Grant extra permissions for 1 to 720 hours. Expired grants stop counting at once, and nobody can grant access to themselves.
Grant or deny a single permission for one person. A denial wins over any grant.
Every dashboard page checks the person’s permissions before it opens.
Profile changes, overrides and temporary grants are written to the audit log, which admins can view and export.