Everyone you invite gets a role, and the role decides what they can see and do. Three come built in.

Open Company Settings › Roles & Permissions to see the whole picture: one row per permission, one column per role, and a tick wherever that role is allowed. The three built-in roles are shown so you can compare them — they can't be changed, which is why nobody can accidentally hand out billing access.

The rows are grouped the way you'd think about them: what a role can do with goods, with spaces, which whole features it can open, what sensitive information it may see, and what it can administer.

If Editor is too much and Viewer is too little, add a custom role. Name it after the job — Warehouse Staff, Shop Floor, Bookkeeper — and tick exactly the permissions that job needs. It becomes another column in the table, right next to the built-in ones.

A common one: someone who can adjust quantities and move stock between spaces, but never sees what anything cost or who you buy it from. Turn off See prices and total value and See vendor and supplier details, and those numbers disappear everywhere for that role — on every screen, and in anything they export.

A couple of permissions depend on others, because of what the documents themselves show. Purchase orders need both price and vendor visibility — a purchase order names its supplier and its cost. Invoices need price visibility, because an invoice shows totals.

Roles aren't set in stone. Edit a custom role and everyone on it changes with it — no need to re-invite anyone — and the next screen they open already respects it.