Roles and permissions

How access works

Privileges

A privilege is permission to do one thing to one kind of record. Its name is the kind of record, an underscore and the action:

• contact_read: see contacts, in lists, search, reports and on their own page.
• contact_write: create contacts and change them. This includes importing, cloning, bulk editing, editing a field in place, and adding comments.
• contact_delete: move contacts to the trash.

The kinds of record are listed below. Besides records, there are privileges for dashboards, integrations, workflows, saved reports and the default values of a workspace.

Roles

A role is a named set of privileges. You give roles to members, and a member can have several.

• Predefined roles come with BunnyCRM and cannot be changed:
  • one for each privilege, such as invoice_read;
  • one for each area and action, such as marketing_read or sales_write, which cover every kind of record of that area;
  • everything_read, everything_write and everything_delete;
  • workspace_admin, which holds everything.
• Custom roles are roles a workspace admin builds for the workspace, for example a sales assistant who may read and write orders and customers.

Writing and deleting always include reading: you cannot change what you cannot see.

Who is a workspace admin

These people can use every page and are never turned away:

• the owners and admins of the workspace;
• anyone who holds the workspace_admin role;
• system administrators of BunnyCRM.

New members

A member who joins a workspace has no role. Until a workspace admin gives them one they see a short notice on the dashboard and can use only what is their own: notes, bookmarks, expenses, action items, life events, My drive, notifications and their preferences.

When it applies

Roles are checked in a workspace once it has been switched on for it. Until then every member can use every page, and the lists below show what each page will need. Pages built on several kinds of record, such as search, counts, the dashboard, the trash, comments and favorites, simply leave out the records you may not read. They do not fail.

If you try something your roles do not allow, BunnyCRM tells you which privilege is missing. Ask a workspace admin to give you a role that has it.

Giving roles to members

Workspace admins manage roles under Settings, then Roles & Privileges:

1. Predefined roles lists the built-in roles. They are read-only.
2. Custom roles lets you build a role on a grid of record kind by Read, Write and Delete. Ticking Write or Delete also ticks Read, and unticking Read clears the others. Ticks for an area or for Everything select all of its kinds at once.
3. Members shows each member of the workspace. Open one to see their roles, add or remove roles, and save.

You cannot remove your own admin role, so a workspace is never left without someone who can give roles. A custom role cannot be deleted while someone still holds it.

The sign-in app's user profile lists its own roles, not these. Give BunnyCRM roles on this page.

Pages

In the tables, record read means the read privilege of the kind of record the page is about, for example invoice_read for the invoices pages. Where a page works with a particular record kind, the privilege is named.

Pages anyone can open

Your own things

These pages work with what only you created. No role is needed.

Around the whole workspace

These need any role: they are not about one kind of record, or they show only what you may read.

Search and data tools

Working with records

Every kind of record has the same set of pages under /v1/mobjs/<kind>/.... They follow the privileges of that kind.

Personal kinds (notes, action items and so on) need no privilege.

Marketing

Sales

Support

Content

Dashboards and reports

Settings

Things only a workspace admin can do

• Give roles to members, and build or delete custom roles.
• Change the business profile.
• Change the plan, and publish or unpublish the workspace's public page.
• Change the object limits of the workspace.
• Switch workspace features on or off, and change the workspace configuration.

System administrators can also look at record counts across all workspaces. That is not available in a workspace.

Privileges by area

Each kind of record has _read, _write and _delete. The role for an area, such as marketing_read, holds that action for every kind in it.

The drive follows companion_file and the document files follow document. Stock movements follow inventory. Personal kinds (notes, action items, recurring action items, life events, bookmarks and expenses) have no privileges: they are always yours alone.

Related