Roles and permissions for company users

Every user on a business account has a role that decides what they can see and do; the company administrator has every permission and assigns roles to everyone else under My Account › Roles and Permissions and Company/Institution Users. New users receive the Default User role unless another role is chosen when they are added.

The administrator. One per account — the person who registered. The administrator can edit the company profile and legal address, manage credit, build the structure, add and remove users, create roles, and see every order and quote placed by anyone on the account. The administrator role cannot be deleted or shared; to transfer it to a colleague, contact [email protected].

Default User. Full access to ordering and quotes: checkout, view own orders, request and edit quotes, check out with a quote, and view the company profile. No access to user management or company credit.

Creating a role. Go to Roles and Permissions, click Add New Role, name it (for example Lab member, Purchasing, Group leader) and tick the permissions. Permissions are grouped as follows; ticking a group ticks everything under it.

Group	What it controls
Sales	Allow checkout; pay on account; view own orders; view orders of users below you in the structure
Quotes	View, request, edit and delete quotes; check out with a quote; manage quotes of users below you
Order approvals (purchase orders)	View own, team or company purchase orders; approve without further approval; create and edit approval rules
Company profile and contacts	View or edit account information, legal address, contacts, payment and shipping information
Company user management	View or manage users and teams; view or manage roles and permissions
Company credit	View credit history and balance

Typical set-ups. A Group leader role with Sales and Quotes including subordinate users, placed above the group's team, sees everything the group orders. A Purchasing role with Order approvals lets the procurement office approve purchase orders that lab members submit. A Lab member role with checkout and quotes only keeps the rest of the account private.

Assigning and changing roles. Open Company/Institution Users, click Edit next to the user, choose the User Role, and save. A role that still has users assigned cannot be deleted. A user who opens a page their role does not allow sees Access Denied — nothing is broken; the administrator can widen the role.

Related: Article 5 (Adding colleagues), Article 6 (You have been invited)