View Categories

Roles and Permissions Overview

Table of Contents

This is the fastest way to understand what each tenant role can do across the platform.

Feature AreaCompanyAdminTenantUser
Billing and subscription changes✅❌
User management✅❌
Contacts✅✅, subject to scope and assignment rules
Connecting or disconnecting Meta, Pinterest and LinkedIn✅ the company owner, and administrators the owner allowed❌
Transferring company ownership✅ the owner only❌
WhatsApp Chat✅✅ with CanUseWhatsAppChat
WhatsApp templates✅❌
WhatsApp campaigns✅❌
Outbound Mail Servers✅❌
Reply-To Mailboxes✅Uses assigned mailbox only
Email Conversations✅ if mailbox exists✅ if mailbox is assigned
Email Templates✅✅ with CanManageEmailTemplates
Email Campaigns✅✅ with CanManageEmailCampaigns
Automation Workflows✅✅ if feature and access are enabled
Instagram, Facebook, Pinterest and LinkedIn: write posts✅✅ Editor level and above
Social posts: publish without review✅✅ Publisher level and above
Social posts: review other people’s posts✅✅ Reviewer level
Instagram and Facebook messages, comments and insights✅✅ if social permissions are granted
Advanced Social Media Analysis✅✅ if the plan includes it (granting Meta permissions: CompanyAdmin only)
WhatsApp Catalogs✅❌
Notifications✅ for own items✅ for own items
API tokens and integrations✅❌
Data export and deletion✅❌

Quick Rule of Thumb #

  • CompanyAdmin configures channels, integrations, billing, users, and tenant-wide settings. One CompanyAdmin is the company’s owner (see 6.7), who alone controls the connected social accounts unless they allow another administrator.
  • TenantUser handles day-to-day execution such as contacts, conversations, and allowed campaigns or workflows.

A third, separate role — SalesAgent — exists outside this table. It is a platform-level referral partner role, not a tenant role, has no access to any company’s data beyond what it’s explicitly assigned, and never appears inside a company account. See 20. Sales Partner Program.

Scroll to Top