---
title: Roles and Permissions Overview
description: This is the fastest way to understand what each tenant role can do across the platform.
url: "https://peikly.com/docs/user-roles-permissions-guide/"
updated: "2026-10-18"
category: Getting Started
tags:
  - Manual sync
---

# Roles and Permissions Overview

This is the fastest way to understand what each tenant role can do across the platform.

| Feature Area | CompanyAdmin | TenantUser |
| --- | --- | --- |
| Billing and subscription changes | ✅ | ❌ |
| User management | ✅ | ❌ |
| Contacts | ✅ | ✅, subject to scope and assignment rules |
| Connecting or disconnecting Meta, Pinterest and LinkedIn | ✅ the company owner, and administrators the owner allowed | ❌ |
| Transferring company ownership | ✅ the owner only | ❌ |
| WhatsApp Chat | ✅ | ✅ with `CanUseWhatsAppChat` |
| WhatsApp templates | ✅ | ❌ |
| WhatsApp campaigns | ✅ | ❌ |
| Outbound Mail Servers | ✅ | ❌ |
| Reply-To Mailboxes | ✅ | Uses assigned mailbox only |
| Email Conversations | ✅ if mailbox exists | ✅ if mailbox is assigned |
| Email Templates | ✅ | ✅ with `CanManageEmailTemplates` |
| Email Campaigns | ✅ | ✅ with `CanManageEmailCampaigns` |
| Automation Workflows | ✅ | ✅ if feature and access are enabled |
| Instagram, Facebook, Pinterest and LinkedIn: write posts | ✅ | ✅ Editor level and above |
| Social posts: publish without review | ✅ | ✅ Publisher level and above |
| Social posts: review other people's posts | ✅ | ✅ Reviewer level |
| Instagram and Facebook messages, comments and insights | ✅ | ✅ if social permissions are granted |
| Advanced Social Media Analysis | ✅ | ✅ if the plan includes it (granting Meta permissions: CompanyAdmin only) |
| WhatsApp Catalogs | ✅ | ❌ |
| Notifications | ✅ for own items | ✅ for own items |
| API tokens and integrations | ✅ | ❌ |
| Data export and deletion | ✅ | ❌ |

## Quick Rule of Thumb

- **CompanyAdmin** configures channels, integrations, billing, users, and tenant-wide settings. One CompanyAdmin is the company's **owner** (see [6.7](/docs/the-company-owner/)), who alone controls the connected social accounts unless they allow another administrator.
- **TenantUser** handles day-to-day execution such as contacts, conversations, and allowed campaigns or workflows.

> **A third, separate role — SalesAgent** — exists outside this table. It is a platform-level referral partner role, not a tenant role, has no access to any company's data beyond what it's explicitly assigned, and never appears inside a company account. See [20. Sales Partner Program](/docs/sales-partner-program/).