User roles & permissions

There are two layers. Inside an organisation, everyone holds one of two roles — Admin or Member (Settings → Members) — sitting under the organisation's Owner, who is whoever created it. Admins manage members, branding, custom data, integrations and the audit trail. A handful of things are owner-only: renaming the organisation, changing its currency, changing the expiry lead time or device lifecycle, and deleting the organisation. The owner can't be removed or demoted by anyone. For MSP workspaces, staff additionally hold an MSP role — Owner and Admin work across every managed client by default, while Technicians are scoped to a named list of clients (up to 30 each), enforced on the server rather than just hidden in the UI.