Roles & permissions

Both products

Summary

A permission is a resource × action pair (for example quote.update). Each role comes with a set of permissions; the workspace assigns roles to people and the Growtek team defines each role's permissions. Changes apply to every workspace instantly.

Role abbreviations: Own = Owner · Adm = Admin · Sel = Seller · TS = TechSupport (Technical Support Assistant) · SM = Social Media. End customer and API Client have no permissions in the internal app.

Factory defaults

The Default roles column shows the values the roles are created with. Growtek may have adjusted them on your platform. If in doubt, ask the assistant "What access do I have?".

Reference table

Administration

Permission	What it enables	Default roles
workspace.read	View the workspace's general settings.	All
workspace.update	Edit the workspace's identity and company.	Own, Adm
workspace.viewSettings	Open Settings.	Own
home.read	View Home.	All
home.viewAll	See the whole workspace's figures and the team ranking in Home.	Own, Adm
audit.read	Consult the audit log.	Own, Adm
users.read	View users.	Own, Adm
users.invite / users.update	Invite and edit users.	Own, Adm
users.delete	Delete users.	Own, Adm
workspacePermissions.read	View Team (members and performance).	Own, Adm
workspacePermissions.create / update / delete	Invite, edit (role, rules), deactivate and delete members.	Own, Adm
integrations.read	View Credentials, provider status and telephony.	Own, Adm
integrations.manage	Create, test and delete credentials; connect Twilio and Retell; activate voice agents.	Own, Adm
dataSync.read	View Sync.	Own, Adm
dataSync.manage	Configure and run sync.	Own, Adm
llmIntegration.read	View the AI key and the knowledge base.	Own, Adm
llmIntegration.create / update / delete	Change the AI key; add, reindex and delete documents.	Own, Adm
agentSettings.read	View the agents' settings.	Own, Adm
agentSettings.update	Change the agents' settings (cadence, Lead Ads, recovery template).	Own, Adm
agentSettings.manageContexto	Edit the agent's Context.	Own, Adm
agentSettings.manageVerticals	Manage the enabled verticals.	Own, Adm
agentSettings.provision	Connect and manage channels.	Own, Adm
billing.read	View Billing.	Own, Adm
billing.viewAll	See the whole workspace's spend (not just your own).	Own, Adm
billing.manageBudget	Change the monthly AI and assistant budget.	Own, Adm
assistant.use	Use the assistant and the checklist, and request support.	Own, Adm, Sel, TS, SM
assistant.reports	Ask the assistant for reports on the data (always within what the person can see).	Own, Adm, Sel, TS, SM

Clients

Permission	What it enables	Default roles
contacts.read	View contacts and export them.	Own, Adm, Sel, TS, SM
contacts.create	Create and import contacts.	Own, Adm, Sel, SM
contacts.update	Edit, assign, tag, move between lists, restore, reclassify, AI call.	Own, Adm, Sel, SM
contacts.delete	Archive, permanently delete and Export data for a contact.	Own, Adm, SM
contacts.viewAll	See all contacts (without it, only your own or assigned ones).	Own, Adm
contacts.readList	View lists.	All
contacts.createList / updateList / deleteList	Create, edit and delete lists.	Own, Adm, SM
business.read	View companies.	All
business.create / update / assign	Create and edit companies; link employees.	Own, Adm, Sel, SM
business.delete	Delete companies.	Own, Adm, SM
business.viewAll	See all companies.	Own, Adm
tag.read	View tags.	All
tag.create / update / delete	Manage tags.	Own, Adm, Sel, SM
tag.viewAll	Edit or delete tags created by others.	Own, Adm
segment.read	View segments.	All
segment.create / update / delete	Manage segments.	Own, Adm, Sel, SM
segment.viewAll	Edit or delete segments created by others.	Own, Adm

Catalog and distributors

Permission	What it enables	Default roles
products.read / services.read / projects.read	View the catalog and export it.	All
products.create / update / delete (and the service and project equivalents)	Create and import, edit and delete items.	Own, Adm
products.readCategory / readSubcategory	View the Categories tab.	All
products.createCategory	Create categories and families.	Own, Adm, SM
products.updateCategory / updateSubcategory	Rename categories and subcategories.	Own, Adm
products.deleteCategory / deleteSubcategory	Delete categories and subcategories.	Own, Adm
products.createSubcategory	Create subcategories.	Own, Adm
products.linkCategory / linkSubcategory	Assign a product's category or subcategory.	All
services.*Category / projects.*Category	Manage and assign service and project categories.	Own, Adm
brand.read	View the Brands tab.	All
brand.create / update / delete	Manage brands.	Own, Adm
brand.viewAll	Edit or delete brands created by others.	—
distributors.read	View distributors and export them.	Own, Adm
distributors.create / update / delete	Create and import, edit and delete distributors.	Own, Adm
distributors.readList	View distributor lists.	All
distributors.createList / updateList / deleteList	Manage distributor lists.	Own, Adm

Pipelines and prospecting

Permission	What it enables	Default roles
prospect.read	View prospecting campaigns and their progress.	Own, Adm, Sel
prospect.create	Launch campaigns (also Create prospection in Remarketing and Post-sales).	Own, Adm, Sel
prospect.update	Retry failed calls, resume and cancel campaigns.	Own, Adm, Sel
prospect.delete	Delete campaigns.	Own, Adm
prospect.viewAll	See campaigns created by others.	—
lead.read	View leads and their detail.	All
lead.create	Create leads manually (New lead, New opportunity).	Own, Adm
lead.update	Notes and feedback to the AI.	Own, Adm, Sel, TS
lead.transition	Move leads between stages and mark them won or lost.	Own, Adm, Sel, TS
lead.assign	Change the sales rep in charge.	Own, Adm
lead.viewAll	See all leads (without it, only assigned or created ones).	Own, Adm
salesPipeline.read	View the sales pipeline.	Own, Adm, Sel, SM
salesPipeline.createStage / updateStage / deleteStage	Manage the pipeline stages.	Growtek team

Quotes

Permission	What it enables	Default roles
quote.read	View quotes, versions, activity and PDF; use templates.	Own, Adm, Sel, SM
quote.create	Create and duplicate quotes.	Own, Adm, Sel
quote.update	Edit, publish, sign, send, change settings and reply to comments.	Own, Adm, Sel
quote.delete	Archive.	Own, Adm
quote.viewAll	See all quotes and choose the sales rep.	Own, Adm
quote.createTemplate	Create, duplicate and save as template.	Own, Adm
quote.updateTemplate	Edit templates.	Own, Adm
quote.deleteTemplate	Delete templates.	Own, Adm

Customer support

Permission	What it enables	Default roles
conversations.read	View the inbox and Channels.	Own, Adm
conversations.viewAll	See all conversations.	Own, Adm
conversations.assign	Assign conversations.	Own, Adm
conversations.takeover	Take over.	Own, Adm
conversations.release	Return to AI.	Own, Adm
conversations.close	Close conversations.	Own, Adm
conversations.block	Block and unblock contacts.	Own, Adm
conversations.setProfile	Correct the customer type the agent uses to respond.	Own, Adm
tickets.read	View tickets.	Own, Adm, Sel, TS
tickets.create	Create tickets.	Own, Adm
tickets.update	Edit a ticket's content and the ticket settings.	Own, Adm
tickets.changeStatus	Change the status.	Own, Adm, Sel, TS
tickets.assign / reassign	Assign and reassign.	Own, Adm
tickets.email	Send emails to the customer from the ticket.	Own, Adm, Sel, TS
tickets.note	Internal notes.	Own, Adm, Sel, TS
tickets.viewAll	See all tickets.	Own, Adm
calendar.read	View the calendar.	Own, Adm, Sel, TS
calendar.create / update	Create, edit and reschedule appointments.	Own, Adm, Sel, TS
calendar.delete	Cancel appointments.	Own, Adm
calendar.viewAll	See the whole workspace's schedule.	Own, Adm

Notes

• See everything (viewAll) is the difference between seeing mine and seeing everything. Without it: contacts created or assigned, leads assigned or created, quotes created or where the person is the sales rep, prospecting campaigns created, and their own tickets and appointments.
• A permission only works if the module is active in the workspace. See Modules.
• The Owner can only be assigned by the Growtek team. From Team you assign Admin, Seller, Technical Support Assistant, Social Media and any custom roles Growtek has created.