Permissions
Configure fine-grained access control for your workspace.
Role-Based Access Control​
PropertyBase uses RBAC (Role-Based Access Control) to manage permissions.
Default Roles​
| Role | Description |
|---|---|
| Owner | Full access including billing |
| Admin | Full access except ownership transfer |
| Agent | Access to assigned resources |
| Viewer | Read-only access |
Permission Matrix​
Properties​
| Permission | Owner | Admin | Agent | Viewer |
|---|---|---|---|---|
| View all | ✓ | ✓ | ✗ | ✗ |
| View assigned | ✓ | ✓ | ✓ | ✓ |
| Create | ✓ | ✓ | ✗ | ✗ |
| Edit | ✓ | ✓ | Assigned | ✗ |
| Delete | ✓ | ✓ | ✗ | ✗ |
| Publish | ✓ | ✓ | ✗ | ✗ |
Leads​
| Permission | Owner | Admin | Agent | Viewer |
|---|---|---|---|---|
| View all | ✓ | ✓ | ✗ | ✗ |
| View assigned | ✓ | ✓ | ✓ | ✓ |
| Create | ✓ | ✓ | ✓ | ✗ |
| Edit | ✓ | ✓ | Assigned | ✗ |
| Reassign | ✓ | ✓ | ✗ | ✗ |
| Delete | ✓ | ✓ | ✗ | ✗ |
Team​
| Permission | Owner | Admin | Agent | Viewer |
|---|---|---|---|---|
| View members | ✓ | ✓ | ✓ | ✓ |
| Invite | ✓ | ✓ | ✗ | ✗ |
| Edit roles | ✓ | ✓ | ✗ | ✗ |
| Remove | ✓ | ✓ | ✗ | ✗ |
Settings​
| Permission | Owner | Admin | Agent | Viewer |
|---|---|---|---|---|
| Workspace settings | ✓ | ✓ | ✗ | ✗ |
| Integrations | ✓ | ✓ | ✗ | ✗ |
| Billing | ✓ | ✗ | ✗ | ✗ |
| API keys | ✓ | ✓ | ✗ | ✗ |
Custom Roles​
Create custom roles for specific needs:
- Go to Settings > Permissions > Roles
- Click Create Role
- Name the role (e.g., "Team Lead")
- Select permissions
- Save
Example: Team Lead Role​
Name: Team Lead
Base: Agent
Additional Permissions:
- View team leads
- Reassign leads within team
- View team analytics
- Edit team member profiles
Field-Level Permissions​
Control visibility of specific fields:
| Field | Admin | Agent | Viewer |
|---|---|---|---|
| Commission rate | Edit | View | Hidden |
| Internal notes | Edit | Edit | Hidden |
| Client phone | View | View | Hidden |
| Deal value | View | View | Hidden |
Configuring Field Permissions​
- Go to Settings > Permissions > Fields
- Select entity type (Lead, Property, etc.)
- Configure field visibility per role
- Save changes
Team-Based Permissions​
Creating Teams​
- Go to Settings > Teams
- Click Create Team
- Add members
- Set team permissions
Team Permissions​
Teams can have:
- Dedicated lead pools
- Assigned properties
- Shared resources
- Team-specific reports
API Permissions (Scopes)​
API keys have granular scopes:
| Scope | Access |
|---|---|
read:properties | Read property data |
write:properties | Create/update properties |
read:leads | Read lead data |
write:leads | Create/update leads |
admin | Full administrative access |
Audit Trail​
All permission changes are logged:
- Who made the change
- What was changed
- When it occurred
- Previous value
View in Settings > Audit Log.
Best Practices​
- Principle of Least Privilege - Start with minimal access
- Regular Reviews - Audit permissions quarterly
- Document Custom Roles - Keep records of role definitions
- Use Teams - Organize by team rather than individual
- Test Changes - Verify permission changes work as expected