[{"data":1,"prerenderedAt":1011},["ShallowReactive",2],{"help:\u002Fhelp\u002Faccount\u002Faccount-suspended-or-pending-review":3,"help-all-categories":175,"help-cat-articles:\u002Fhelp\u002Faccount\u002Faccount-suspended-or-pending-review":295,"help-related:\u002Fhelp\u002Faccount\u002Faccount-suspended-or-pending-review":296},{"id":4,"title":5,"audience":6,"body":7,"category":152,"description":153,"draft":154,"extension":155,"icon":156,"keywords":157,"meta":164,"navigation":165,"order":166,"path":167,"related":168,"seo":171,"stem":172,"updatedAt":173,"__hash__":174},"help\u002Fhelp\u002Faccount\u002Faccount-suspended-or-pending-review.md","Why is my account suspended or pending review?","clinic",{"type":8,"value":9,"toc":140},"minimark",[10,19,24,93,97,104,114,118,123,126,130,133,137],[11,12,13,14,18],"p",{},"These screens mean your login worked but your ",[15,16,17],"strong",{},"membership"," in that business is paused, ended, or awaiting approval. Pending review resolves itself when an admin approves you; suspension is reversed by an admin; \"Access ended\" means you've been offboarded.",[20,21,23],"h2",{"id":22},"what-does-each-screen-mean","What does each screen mean?",[25,26,27,43],"table",{},[28,29,30],"thead",{},[31,32,33,37,40],"tr",{},[34,35,36],"th",{},"Screen",[34,38,39],{},"Meaning",[34,41,42],{},"How it resolves",[44,45,46,63,80],"tbody",{},[31,47,48,54,57],{},[49,50,51],"td",{},[15,52,53],{},"Pending review",[49,55,56],{},"Your account is set up, but the business requires an admin to approve new team members",[49,58,59,60],{},"An admin approves you — the page checks every 30 seconds and lets you in automatically, or press ",[15,61,62],{},"Check now",[31,64,65,70,77],{},[49,66,67],{},[15,68,69],{},"Access suspended",[49,71,72,73,76],{},"An admin has ",[15,74,75],{},"paused"," your access; your record and history stay intact",[49,78,79],{},"An admin restores access — if it's a mistake, contact your manager",[31,81,82,87,90],{},[49,83,84],{},[15,85,86],{},"Access ended",[49,88,89],{},"You've been offboarded or deactivated — this isn't a pause",[49,91,92],{},"Contact the business directly if you believe it's an error",[20,94,96],{"id":95},"what-can-i-do-from-a-holding-screen","What can I do from a holding screen?",[11,98,99,100,103],{},"Only ",[15,101,102],{},"Sign out",". Nothing in the business can be viewed or changed while access is paused — that's the point of the screen.",[105,106,107],"note",{},[11,108,109,110,113],{},"These states are about your membership in ",[15,111,112],{},"one"," business, not your Owneli login. If you belong to more than one business, being suspended in one doesn't touch your access to the others.",[20,115,117],{"id":116},"common-questions","Common questions",[119,120,122],"h3",{"id":121},"how-long-does-pending-review-take","How long does pending review take?",[11,124,125],{},"As long as it takes a human to click approve. If you've been waiting a while, nudge the person who invited you — the page will let you in the moment they do.",[119,127,129],{"id":128},"was-my-data-deleted-when-i-was-suspended","Was my data deleted when I was suspended?",[11,131,132],{},"No. Suspension keeps everything intact — appointments, sales, and timesheets stay attached to you.",[119,134,136],{"id":135},"it-says-account-deactivated-at-the-login-page-is-that-the-same-thing","It says \"account deactivated\" at the login page — is that the same thing?",[11,138,139],{},"Same family: deactivation ends access before you even reach the app. Contact the business; there's nothing to fix on your side.",{"title":141,"searchDepth":142,"depth":142,"links":143},"",2,[144,145,146],{"id":22,"depth":142,"text":23},{"id":95,"depth":142,"text":96},{"id":116,"depth":142,"text":117,"children":147},[148,150,151],{"id":121,"depth":149,"text":122},3,{"id":128,"depth":149,"text":129},{"id":135,"depth":149,"text":136},"account","What Owneli's \"Access suspended\", \"Access ended\", and \"Pending review\" screens mean, how each gets resolved, and who to contact.",false,"md","i-lucide-lock",[158,159,160,161,162,163],"account suspended","pending review","access ended","locked out of account","waiting for approval","account deactivated",{},true,50,"\u002Fhelp\u002Faccount\u002Faccount-suspended-or-pending-review",[169,170],"\u002Fhelp\u002Faccount\u002Flog-in-and-reset-your-password","\u002Fhelp\u002Fsettings\u002Froles-and-permissions",{"title":5,"description":153},"help\u002Faccount\u002Faccount-suspended-or-pending-review","2026-08-14","aebL5Z1WvtqzAO59r3dyEiJYj5irzLkDWiA6lM_m5aE",[176,187,196,205,215,225,235,245,255,265,274,285],{"id":177,"title":178,"audience":6,"description":179,"extension":180,"icon":181,"meta":182,"order":183,"slug":184,"stem":185,"__hash__":186},"helpCategories\u002Fhelp\u002Fcategories\u002Fgetting-started.yml","Getting started","Set up your workspace, learn the layout, and run your first day.","yml","i-lucide-compass",{},1,"getting-started","help\u002Fcategories\u002Fgetting-started","lTnfg_2tKvxQ9QanJ9XY3shoBHrJNWNfnxhcYaaKKPI",{"id":188,"title":189,"audience":6,"description":190,"extension":180,"icon":191,"meta":192,"order":142,"slug":193,"stem":194,"__hash__":195},"helpCategories\u002Fhelp\u002Fcategories\u002Fcalendar.yml","Calendar & booking","Book, move, and cancel appointments. Block time, work the waitlist, and read the grid at a glance.","i-lucide-calendar",{},"calendar","help\u002Fcategories\u002Fcalendar","s5UMHzRIeTUFi7mdsOyuSluzJBp79U9WTsTpOtbaW-E",{"id":197,"title":198,"audience":6,"description":199,"extension":180,"icon":200,"meta":201,"order":149,"slug":202,"stem":203,"__hash__":204},"helpCategories\u002Fhelp\u002Fcategories\u002Fcheckout.yml","Checkout & payments","Ring up a sale, take tips, handle deposits and fees, issue refunds, and close the drawer.","i-lucide-credit-card",{},"checkout","help\u002Fcategories\u002Fcheckout","4PQPgJd7Z25g0SvtoqqdMlnzk3DlcJpaZhNAiNiYVW0",{"id":206,"title":207,"audience":6,"description":208,"extension":180,"icon":209,"meta":210,"order":211,"slug":212,"stem":213,"__hash__":214},"helpCategories\u002Fhelp\u002Fcategories\u002Fclients.yml","Clients & forms","Add and find clients, read a client profile, and send forms and consents.","i-lucide-users",{},4,"clients","help\u002Fcategories\u002Fclients","u-tqzEJo2gR_wJ7x7y-EMIF3L4TP9EuBWlamwgwCC0I",{"id":216,"title":217,"audience":6,"description":218,"extension":180,"icon":219,"meta":220,"order":221,"slug":222,"stem":223,"__hash__":224},"helpCategories\u002Fhelp\u002Fcategories\u002Fretail.yml","Memberships, packages & gift cards","The things clients buy once and spend down over time, and how each one behaves at checkout.","i-lucide-gift",{},5,"retail","help\u002Fcategories\u002Fretail","wVVr_rc_P9p2RZWwy0XKsNB9fQ7XtQxxIz4qnixkGkg",{"id":226,"title":227,"audience":6,"description":228,"extension":180,"icon":229,"meta":230,"order":231,"slug":232,"stem":233,"__hash__":234},"helpCategories\u002Fhelp\u002Fcategories\u002Foperations.yml","Operations","The internal side of the business, covering your written playbook, task boards, venue incidents, and the policies everyone signs.","i-lucide-briefcase",{},6,"operations","help\u002Fcategories\u002Foperations","kSPRTYYbOW5LBNuaYXGv0C4IE7BqS2n-OkCSI97f-cM",{"id":236,"title":237,"audience":6,"description":238,"extension":180,"icon":239,"meta":240,"order":241,"slug":242,"stem":243,"__hash__":244},"helpCategories\u002Fhelp\u002Fcategories\u002Fteam.yml","Team & scheduling","Working hours, the weekly roster, clock-in, timesheets, and time off.","i-lucide-id-card",{},7,"team","help\u002Fcategories\u002Fteam","1cMbCRwUmewb4t_DwUJ7jJUjntx-odU8jRDgBredsPs",{"id":246,"title":247,"audience":6,"description":248,"extension":180,"icon":249,"meta":250,"order":251,"slug":252,"stem":253,"__hash__":254},"helpCategories\u002Fhelp\u002Fcategories\u002Fgrowth.yml","Reports & growth","Read the numbers, export them, and find the report you actually need.","i-lucide-trending-up",{},8,"growth","help\u002Fcategories\u002Fgrowth","3XyCU-DkoYi7xSPz0tDRohlYkNBUS0YsLo-insknI8o",{"id":256,"title":257,"audience":6,"description":258,"extension":180,"icon":259,"meta":260,"order":261,"slug":262,"stem":263,"__hash__":264},"helpCategories\u002Fhelp\u002Fcategories\u002Fsettings.yml","Settings & admin","Services and pricing, who can see what, and moving your data in from another system.","i-lucide-settings",{},9,"settings","help\u002Fcategories\u002Fsettings","rdLQHp7tfAu5iySbsypfXu1kOuujDAuLVk6yGidNvtQ",{"id":266,"title":267,"audience":6,"description":268,"extension":180,"icon":269,"meta":270,"order":271,"slug":152,"stem":272,"__hash__":273},"helpCategories\u002Fhelp\u002Fcategories\u002Faccount.yml","Your login and profile","Your own login, password, two-factor security, profile, and language.","i-lucide-user-circle",{},10,"help\u002Fcategories\u002Faccount","8JZPH_8Q-lnEEFgysE9gCwyd1pzUe2hfAebATuQ5Pog",{"id":275,"title":276,"audience":277,"description":278,"extension":180,"icon":279,"meta":280,"order":281,"slug":282,"stem":283,"__hash__":284},"helpCategories\u002Fhelp\u002Fcategories\u002Fbook-online.yml","Book online","client","Booking, paying, and managing your visit from your venue's booking page and the private links they send you.","i-lucide-globe",{},20,"book-online","help\u002Fcategories\u002Fbook-online","dUBIoELt-ci1vqbw_VX1VA6PGJV8V-9x4ZmpAk1aXXE",{"id":286,"title":287,"audience":277,"description":288,"extension":180,"icon":289,"meta":290,"order":291,"slug":292,"stem":293,"__hash__":294},"helpCategories\u002Fhelp\u002Fcategories\u002Fportal.yml","Your account and visits","Booking from your account, managing your visits, and using your wallet, memberships and rewards.","i-lucide-user-round",{},21,"portal","help\u002Fcategories\u002Fportal","D8_zQhv9hO2b9PYDADw-ebh1yZUuC0UcBt3DDZbMAH4",[],[297,552],{"id":298,"title":299,"audience":6,"body":300,"category":152,"description":538,"draft":154,"extension":155,"icon":539,"keywords":540,"meta":547,"navigation":165,"order":271,"path":169,"related":548,"seo":549,"stem":550,"updatedAt":173,"__hash__":551},"help\u002Fhelp\u002Faccount\u002Flog-in-and-reset-your-password.md","Log in and reset your password",{"type":8,"value":301,"toc":515},[302,314,318,321,358,395,399,433,444,448,474,479,481,485,488,492,497,501,508,512],[11,303,304,305,309,310,313],{},"Sign in at ",[306,307,308],"code",{},"\u002Fauth\u002Flogin"," with your email and password — or skip the password entirely and have Owneli email you a one-time sign-in link. Forgot your password? ",[15,311,312],{},"Forgot password?"," on the login page emails you a reset link.",[20,315,317],{"id":316},"how-do-i-log-in-to-owneli","How do I log in to Owneli?",[11,319,320],{},"Two ways in, both starting from your email address:",[25,322,323,333],{},[28,324,325],{},[31,326,327,330],{},[34,328,329],{},"Method",[34,331,332],{},"When to use it",[44,334,335,348],{},[31,336,337,342],{},[49,338,339],{},[15,340,341],{},"Password",[49,343,344,345],{},"The everyday route — email + password, then ",[15,346,347],{},"Sign in",[31,349,350,355],{},[49,351,352],{},[15,353,354],{},"Magic link",[49,356,357],{},"You forgot the password, or you're on a device you'd rather not type it on",[359,360,361,365,371,375,384,388],"steps",{},[119,362,364],{"id":363},"enter-your-email-and-password","Enter your email and password",[11,366,367,368,370],{},"Press ",[15,369,347],{},".",[119,372,374],{"id":373},"enter-your-two-factor-code-if-asked","Enter your two-factor code if asked",[11,376,377,378,383],{},"If ",[379,380,382],"a",{"href":381},"\u002Fhelp\u002Faccount\u002Fsecure-your-account-with-mfa","two-factor authentication"," is on for your account, type the 6-digit code from your authenticator app.",[119,385,387],{"id":386},"you-land-in-the-app","You land in the app",[11,389,390,391,394],{},"If your business requires two-factor and you haven't set it up yet, a ",[15,392,393],{},"Secure your account"," screen may offer to set it up first — you can do it now or later.",[20,396,398],{"id":397},"how-do-i-sign-in-without-a-password","How do I sign in without a password?",[359,400,401,405,411,415,418,422],{},[119,402,404],{"id":403},"send-yourself-the-link","Send yourself the link",[11,406,407,408,370],{},"Enter your email on the login page and press ",[15,409,410],{},"Send magic link",[119,412,414],{"id":413},"open-the-email","Open the email",[11,416,417],{},"You can either click the sign-in link, or type the one-time code from the email into the field that appears on the login page — both work.",[119,419,421],{"id":420},"didnt-arrive","Didn't arrive?",[11,423,424,425,428,429,432],{},"Use ",[15,426,427],{},"Resend link",", or ",[15,430,431],{},"Use a different email"," to start over.",[434,435,436],"tip",{},[11,437,438,439,443],{},"The magic link only works for accounts that already exist. If you've never been invited to a Owneli business, ",[379,440,442],{"href":441},"\u002Fhelp\u002Faccount\u002Faccept-an-invitation","ask for an invitation"," first.",[20,445,447],{"id":446},"how-do-i-reset-a-forgotten-password","How do I reset a forgotten password?",[359,449,450,454,457,461,467,471],{},[119,451,453],{"id":452},"click-forgot-password","Click \"Forgot password?\"",[11,455,456],{},"It's on the login page, next to the password field.",[119,458,460],{"id":459},"enter-your-email","Enter your email",[11,462,367,463,466],{},[15,464,465],{},"Send reset link",". A confirmation screen tells you it's on the way.",[119,468,470],{"id":469},"set-a-new-password","Set a new password",[11,472,473],{},"Follow the link in the email to the reset page, choose a new password, and sign in as usual.",[105,475,476],{},[11,477,478],{},"For security, the login page never confirms whether an email address has an account — a failed magic link or reset shows the same generic message either way.",[20,480,117],{"id":116},[119,482,484],{"id":483},"why-does-it-say-my-account-has-been-deactivated","Why does it say my account has been deactivated?",[11,486,487],{},"An administrator has ended your access to that business. Contact the business directly — there's nothing to fix on your side.",[119,489,491],{"id":490},"i-signed-in-but-see-access-suspended-or-pending-review-what-now","I signed in but see \"Access suspended\" or \"Pending review\" — what now?",[11,493,494,495],{},"Those are membership states, not login failures. See ",[379,496,5],{"href":167},[119,498,500],{"id":499},"i-lost-my-authenticator-app-and-cant-get-past-the-code-screen","I lost my authenticator app and can't get past the code screen",[11,502,503,504,507],{},"See the recovery section of ",[379,505,506],{"href":381},"Secure your account with two-factor authentication"," — an admin or the owner can disable your two-factor so you can re-enrol.",[119,509,511],{"id":510},"can-i-stay-signed-in","Can I stay signed in?",[11,513,514],{},"Yes — sessions persist on trusted devices. If your business sets an inactivity timeout, you'll be signed out after that idle period.",{"title":141,"searchDepth":142,"depth":142,"links":516},[517,522,527,532],{"id":316,"depth":142,"text":317,"children":518},[519,520,521],{"id":363,"depth":149,"text":364},{"id":373,"depth":149,"text":374},{"id":386,"depth":149,"text":387},{"id":397,"depth":142,"text":398,"children":523},[524,525,526],{"id":403,"depth":149,"text":404},{"id":413,"depth":149,"text":414},{"id":420,"depth":149,"text":421},{"id":446,"depth":142,"text":447,"children":528},[529,530,531],{"id":452,"depth":149,"text":453},{"id":459,"depth":149,"text":460},{"id":469,"depth":149,"text":470},{"id":116,"depth":142,"text":117,"children":533},[534,535,536,537],{"id":483,"depth":149,"text":484},{"id":490,"depth":149,"text":491},{"id":499,"depth":149,"text":500},{"id":510,"depth":149,"text":511},"How to log in to Owneli with a password or a magic link, reset a forgotten password, and fix the most common can't-log-in problems.","i-lucide-log-in",[541,542,543,544,545,546],"reset my password","can't log in","forgot password","magic link login","sign in without password","login code email",{},[381,441,167],{"title":299,"description":538},"help\u002Faccount\u002Flog-in-and-reset-your-password","8Ft7WPOOaQyRaUtMBfTlkHhy5NuO4Q8yXwlS_AD-TeE",{"id":553,"title":554,"audience":6,"body":555,"category":262,"description":1000,"draft":154,"extension":155,"icon":1001,"keywords":1002,"meta":1003,"navigation":165,"order":281,"path":170,"related":1004,"seo":1007,"stem":1008,"updatedAt":1009,"__hash__":1010},"help\u002Fhelp\u002Fsettings\u002Froles-and-permissions.md","Roles and permissions",{"type":8,"value":556,"toc":981},[557,560,565,569,572,626,631,635,638,642,661,697,700,753,757,764,827,830,836,840,843,874,881,885,927,931,938,943,947,950,954,968,971,975],[11,558,559],{},"Access in Owneli is capability-based, not tier-based. There is no hidden ladder where \"manager\" magically unlocks things — every screen and every API call checks a specific capability, and roles are just named bundles of capabilities.",[11,561,562],{},[15,563,564],{},"Settings → Team & access → Permission roles",[20,566,568],{"id":567},"the-four-starting-roles","The four starting roles",[11,570,571],{},"Every business is created with four system roles you can adapt.",[25,573,574,584],{},[28,575,576],{},[31,577,578,581],{},[34,579,580],{},"Role",[34,582,583],{},"What it is",[44,585,586,596,606,616],{},[31,587,588,593],{},[49,589,590],{},[15,591,592],{},"Owner",[49,594,595],{},"Full access to everything, plus owner-reserved actions: enforcing multi-factor authentication and transferring ownership.",[31,597,598,603],{},[49,599,600],{},[15,601,602],{},"Admin",[49,604,605],{},"Full access to the business. Can invite people, manage the team, and change settings.",[31,607,608,613],{},[49,609,610],{},[15,611,612],{},"Manager",[49,614,615],{},"Operational lead. Manages clients, forms and sends, approves time off. Cannot change settings or invite users.",[31,617,618,623],{},[49,619,620],{},[15,621,622],{},"Staff",[49,624,625],{},"Standard team member. The capability set is adjustable per business.",[105,627,628],{},[11,629,630],{},"The owner is deliberately a superuser and is granted every capability, including ones added in future releases. That's so a new feature can never accidentally lock the owner out of their own business.",[20,632,634],{"id":633},"two-axes","Two axes",[11,636,637],{},"Access is controlled along two axes, and both matter.",[119,639,641],{"id":640},"_1-what-you-can-do","1. What you can do",[11,643,644,645,648,649,652,653,656,657,660],{},"Each of roughly three dozen capability areas carries its own actions — typically ",[15,646,647],{},"view",", ",[15,650,651],{},"manage",", and ",[15,654,655],{},"delete",", plus ",[15,658,659],{},"create"," where creating differs meaningfully from editing.",[11,662,663,664,648,667,648,670,648,673,648,676,648,679,648,682,648,685,648,688,648,691,652,694,370],{},"The permission editor groups them the way you think about the app: ",[15,665,666],{},"Calendar",[15,668,669],{},"Scheduling & timesheets",[15,671,672],{},"Sales",[15,674,675],{},"Clients",[15,677,678],{},"Catalog",[15,680,681],{},"Marketing",[15,683,684],{},"Inventory & Retail",[15,686,687],{},"Team",[15,689,690],{},"Reports",[15,692,693],{},"Workspace",[15,695,696],{},"AI concierge",[11,698,699],{},"Things are split more finely than you might expect, on purpose:",[701,702,703,713,722,732,738],"ul",{},[704,705,706,709,710,712],"li",{},[15,707,708],{},"Cash drawer"," is separate from ",[15,711,672],{}," — a cashier can ring up without holding the power to open, count and reconcile the till.",[704,714,715,709,718,721],{},[15,716,717],{},"Scheduling",[15,719,720],{},"Appointments"," — you can grant \"runs the rota and signs off payroll\" without handing over the client calendar.",[704,723,724,727,728,731],{},[15,725,726],{},"Client photos"," and ",[15,729,730],{},"clinical charts"," are separate from the client record — health imagery grants and revokes on its own.",[704,733,734,737],{},[15,735,736],{},"Compensation"," is its own area — someone can see their own earnings without seeing a colleague's.",[704,739,740,648,743,648,746,727,749,752],{},[15,741,742],{},"Purchasing",[15,744,745],{},"stock",[15,747,748],{},"transfers",[15,750,751],{},"products"," each grant independently, so a buyer can raise purchase orders without touching stock counts.",[119,754,756],{"id":755},"_2-which-rows-you-can-do-it-to","2. Which rows you can do it to",[11,758,759,760,763],{},"The ",[15,761,762],{},"data scope"," decides which records an action reaches:",[25,765,766,775],{},[28,767,768],{},[31,769,770,773],{},[34,771,772],{},"Scope",[34,774,39],{},[44,776,777,787,797,807,817],{},[31,778,779,784],{},[49,780,781],{},[15,782,783],{},"All",[49,785,786],{},"Everything in the business",[31,788,789,794],{},[49,790,791],{},[15,792,793],{},"Own",[49,795,796],{},"Only records belonging to this person",[31,798,799,804],{},[49,800,801],{},[15,802,803],{},"Assigned",[49,805,806],{},"Only records they're assigned to",[31,808,809,814],{},[49,810,811],{},[15,812,813],{},"Location",[49,815,816],{},"Only records at their location",[31,818,819,824],{},[49,820,821],{},[15,822,823],{},"None",[49,825,826],{},"Nothing",[11,828,829],{},"Staff-tier defaults reflect how a provider actually works: their own calendar, their assigned clients, their own timesheets, their own sales, their own reports and earnings.",[831,832,833],"warning",{},[11,834,835],{},"Granting an action without widening its scope is the most common configuration mistake. Someone with \"view all appointments\" but a scope of \"own\" will still only see their own calendar, and it will look like a bug.",[20,837,839],{"id":838},"fine-grained-client-access","Fine-grained client access",[11,841,842],{},"The client record is the most sensitive surface in the app, so it's split further:",[701,844,845,851,857,863,869],{},[704,846,847,850],{},[15,848,849],{},"Can view client profile"," — the base",[704,852,853,856],{},[15,854,855],{},"Can view contact details"," — email and phone",[704,858,859,862],{},[15,860,861],{},"Can view personal info"," — date of birth and home address",[704,864,865,868],{},[15,866,867],{},"Can view spending and wallet"," — lifetime value, balances, loyalty",[704,870,871],{},[15,872,873],{},"Can add and remove tags",[11,875,876,877,880],{},"Denied fields are masked in the interface ",[15,878,879],{},"and"," stripped from API responses — this is enforced at the server, not hidden with CSS.",[20,882,884],{"id":883},"building-a-custom-role","Building a custom role",[359,886,887,891,894,898,901,905,908,912,918,922],{},[119,888,890],{"id":889},"start-from-the-closest-system-role","Start from the closest system role",[11,892,893],{},"Duplicate it rather than building from an empty matrix. Empty matrices produce roles that can't do their job.",[119,895,897],{"id":896},"turn-on-the-areas-the-role-needs","Turn on the areas the role needs",[11,899,900],{},"Each area has a master toggle. The editor enforces parent-first ordering — a child permission can't take effect while its parent is off.",[119,902,904],{"id":903},"set-the-scope-for-each-area","Set the scope for each area",[11,906,907],{},"Only surfaces with end-to-end enforcement offer a scope picker, so every option you're shown actually does something.",[119,909,911],{"id":910},"preview-it","Preview it",[11,913,424,914,917],{},[15,915,916],{},"View as"," to see the app exactly as that role sees it. This is the step people skip and then regret.",[119,919,921],{"id":920},"assign-it","Assign it",[11,923,924,925,370],{},"Set the role on each team member under ",[15,926,687],{},[20,928,930],{"id":929},"what-the-sidebar-tells-you","What the sidebar tells you",[11,932,933,934,937],{},"Every nav item is capability-gated, so people only see what they can open. An ",[15,935,936],{},"eye icon"," beside a link means view-only access — you can read the page but not change anything. It saves a click into a page where every button is disabled.",[831,939,940],{},[11,941,942],{},"Hiding a link is presentation. The real gate is on the server: every endpoint re-checks the capability and the scope. Restoring a hidden link in the browser gets you an error, not access.",[20,944,946],{"id":945},"multi-factor-authentication","Multi-factor authentication",[11,948,949],{},"Owners can require multi-factor authentication for the business. Once enforced, everyone is prompted to enrol at sign-in.",[20,951,953],{"id":952},"suspending-and-offboarding","Suspending and offboarding",[701,955,956,962],{},[704,957,958,961],{},[15,959,960],{},"Suspend"," locks someone out immediately while keeping their record and history intact",[704,963,964,967],{},[15,965,966],{},"Archive"," runs a reassignment wizard so their upcoming appointments and open work move to someone else before the record is closed",[11,969,970],{},"Neither deletes their history. Past sales, appointments and timesheets stay attached to them for reporting and payroll.",[20,972,974],{"id":973},"auditing","Auditing",[11,976,977,980],{},[15,978,979],{},"Settings → Compliance → Audit log"," records who did what and when — role changes, permission changes, refunds, voids, merges, deletions. Audit access is its own capability, so a compliance reviewer can read it without being an admin.",{"title":141,"searchDepth":142,"depth":142,"links":982},[983,984,988,989,996,997,998,999],{"id":567,"depth":142,"text":568},{"id":633,"depth":142,"text":634,"children":985},[986,987],{"id":640,"depth":149,"text":641},{"id":755,"depth":149,"text":756},{"id":838,"depth":142,"text":839},{"id":883,"depth":142,"text":884,"children":990},[991,992,993,994,995],{"id":889,"depth":149,"text":890},{"id":896,"depth":149,"text":897},{"id":903,"depth":149,"text":904},{"id":910,"depth":149,"text":911},{"id":920,"depth":149,"text":921},{"id":929,"depth":142,"text":930},{"id":945,"depth":142,"text":946},{"id":952,"depth":142,"text":953},{"id":973,"depth":142,"text":974},"The four starting roles, the two axes that control access, and how to build a custom role without locking yourself out.","i-lucide-shield-check",[],{},[1005,1006],"\u002Fhelp\u002Fteam\u002Fshifts-timesheets-and-time-off","\u002Fhelp\u002Fgrowth\u002Ffind-and-read-a-report",{"title":554,"description":1000},"help\u002Fsettings\u002Froles-and-permissions","2026-09-01","TENSZfd1Unekw8skVK5ZgEABdPfFFfQpo8przNdYK7o",1790218954957]