Roles and permissions explained

A role is a named bundle of permissions you assign to a user, so you control access by job rather than toggling settings person by person. A user can hold more than one role.

Built-in roles

Role	Typical access
Owner	Everything, including billing and deciding who else can manage billing
Admin	Everything except billing: settings, users, roles, and every module
Billing manager	Billing only: pay invoices, update cards, change or cancel the plan
Inventory, Sales, Purchasing, Production manager	Full access to that area
Custom	Scoped to the specific modules and actions you allow

Assign the least access someone needs to do their job. You can always widen it later.

What permissions cover

Permissions gate both whole areas and specific actions. Common examples:

• Viewing vs. editing inventory, purchasing, sales, or production.
• Issuing or approving purchase and sales orders.
• Managing users, roles, and account settings.
• Accessing billing and the subscription.

Admins and owners manage users and roles. Billing is separate: only owners and people with billing access (such as the Billing manager role) can pay for, change, or cancel the subscription, and only an owner can give or remove that access.

Choose the right role

• People who run the whole account day to day → Admin.
• A bookkeeper or accounts payable person who pays for Fiddle → Billing manager, alongside whatever role they need for their other work.
• Department leads → the matching manager role.
• Warehouse or production staff who only need part of the app → Custom.

Review roles when someone changes jobs, and remove access promptly when people leave.

Next steps

To assign roles as you add people, see invite users and manage roles.