Roles and permissions: how access works
Access in Essential is controlled by roles. A role is a named bundle of permissions, and each user is assigned one or more roles. A user's effective access is the union of every permission across all of their roles, so adding a role only ever grants more, never less.
Permissions are grouped into categories and cover specific abilities, for example viewing invoices, editing quotes, filling out inspection reports, managing users, or opening property files.
Some permissions depend on others: turning one on automatically pulls in everything it requires, and turning a required one off removes anything that depended on it. Essential ships with built-in default roles. These are read-only and cannot be edited or deleted directly.
Creating, duplicating, editing, and deleting roles is self-serve: anyone holding the Manage roles permission can create a role, duplicate a built-in role into an editable copy, edit it, and delete it directly from the Roles & Permissions page.
When management actions are available, a key limit protects against privilege escalation: you cannot grant a permission you do not hold yourself.
Where to find it: Settings, then Roles & Permissions and Users
Related guides
Last updated
Was this helpful?