bont sos.
EN DE

Roles and access

Create custom roles with hand-picked permissions — control which pages, data and actions each member of your workspace can use.

Every workspace ships with three default roles — Owner, Admin and Member. If those don't fit your team, Settings → Roles and access lets you build custom roles: named permission sets you create per workspace and assign to members exactly like the default roles.

Open it

Open the settings cogwheel dropdown and choose Roles and access. The entry only appears if your role may create and edit roles — by default that's owners and admins.

The roles list

Roles are shown as cards in two sections:

  • Default roles — Owner, Admin and Member, marked with a lock icon. You can open one to see everything it grants, but they can't be edited or deleted.
  • Custom roles — roles your organization built, ordered by how much access they hold.

Each card carries an access meter showing how many permissions the role holds ("n of 414 permissions"); hover it for a per-group breakdown. Only permissions for apps your workspace actually uses are shown.

Creating a custom role

  1. Click Create role.
  2. Give the role a name and pick a Based on role to start from — the new role begins as a copy of that role's access. A "Based on …" note stays on the role and counts how far it has drifted from its base.
  3. Adjust the permissions (see below), then review and save.

Editing permissions

Permissions are grouped by product area. Each row is a capability — for example "Blacklist" or "Lead research presets" — and offers up to four levels:

  • No access — the capability is hidden entirely.
  • View — read-only.
  • Work — use it day-to-day, without changing its configuration.
  • Manage — full control, including configuration.

Useful tools while editing:

  • Search permissions — filters the rows; groups without a match dim.
  • App picker — restricts the editor to permissions of specific apps.
  • Bulk assignment — set a whole section to one level in a click; rows that don't offer that level fall to the level below.
  • Presets — one-click starting points (for example Cold Calling in pitch bont) that reset the editor to just what that job needs. Applying a preset only changes the editor — nothing is saved until you review.
  • Fine-tune — expand a row to toggle individual actions. A selection that matches no level exactly is stored as Custom.

The Pages section controls which pages the role sees in the sidebar and can open by URL. Hiding a page only removes the page itself — what the role can read and change elsewhere is set by the capability rows.

Pages are granted one by one, so different roles can work in different parts of the app. Which pages are listed depends on the apps your workspace uses:

  • base bont — Inbox, Calendar, LinkedIn Inbox, Pipeline, Commercial orders, Contacts, Companies, Activities, Reporting, Insights, Data Health.
  • pitch bont — Inbox, Manual cold calling (the cold-calling board), Campaigns, Lead lists, Lead database, Reporting, Cold calls, Queue (outgoing events).
  • pure bont — Inbox, Calendar, Pipeline, Customer Base, Contacts, Companies, Activities, Reporting, Insights, Forecasting, Data Health.
  • funky bont — Pipeline, Customer Base, Insights, Forecasting, Data Health.

The names are the sidebar labels, and a page is one permission rather than one per app: granting Contacts grants the contacts list wherever it appears. Pages several apps share — Inbox, Calendar, Contacts, Companies, Activities, Pipeline, Reporting, Insights, Forecasting, Data Health and Customer Base — are granted in one go; pitch bont's own Inbox and the rest belong to a single app each.

A role without a page permission doesn't just lose the sidebar entry: opening the page's URL directly shows a not-found page. For example, revoking Manual cold calling keeps a salesperson out of the calling board while leaving the rest of pitch bont intact.

Saving

Edits aren't saved directly. As soon as your selection differs from the saved role, a bar shows the unsaved changes with Discard and Review changes. Review opens a Confirm role changes dialog listing everything under Access added and Access removed, plus how many members will receive the new access immediately. Save role applies it at once for everyone holding the role.

Assigning and deleting

  • Custom roles are assigned from Settings → Members, exactly like the default roles — see Removing a member or changing their role.
  • Delete a custom role from its card's trash icon or from the role page. A role that members still hold can't be deleted: the dialog lists them and links to the Members page so you can move them first.

Related