Roles and rights
Rights per module and per scope: own, team or all.
Stage 1 · Foundation · In development
Rights are per module and per scope: own, team or all. The roles below are the defaults and the firm can change them. Departments are optional and off by default.
| Module | Owner | Admin | Manager | Employee | Client contact |
|---|---|---|---|---|---|
| Tasks | all | all | team | own + projects | requests |
| Clients and projects | all | all | all | their own | their own |
| Contracts and quotes | all | all | can view | — | their quotes |
| Finance | all | optional | — | — | their invoices |
| Personal finance | only the owner | — | — | — | — |
| Leave | approves | approves | approves | own + calendar | — |
| Hours | all | all | team | own | own (if hourly) |
| Settings | all | all | — | profile | profile |
Accountants do not sign in. They work in their own program and receive the pack by Drive and email. An “Accountant” role can be added later if needed.
The same rights apply to “Ask” and to the MCP interface: Claude sees and can do only what the person it acts for can.