Understanding Roles & Permissions

SuiteOp uses a role-based permission system to control what each team member can see and do. Every member of your organization is assigned a role, and each role comes with a default set of permissions. You can also create custom permission sets for team members who need a non-standard configuration.

Role Hierarchy

Roles are ranked by authority level. A user can only manage (invite, edit, or remove) other users whose role is below theirs in the hierarchy.

Priority	Role	Description
1 (highest)	Owner	Full access to everything. Can manage all users, billing, and account settings.
2	Admin	Full access to everything. Functionally equivalent to Owner for day-to-day operations.
3	Manager	Broad operational access. Can manage properties, reservations, tasks, devices, users, workflows, and organization settings. Cannot access account-level admin functions.
3	Custom	Same hierarchy level as Manager. Permissions are manually configured per user.
4	Member	Basic access. Can view the dashboard, properties, reservations, and devices. No edit permissions.
5	Field Supervisor	Field operations focus. Can view and manage tasks, view properties, reservations, devices, lock codes, staff codes, and events.
6	Field Team Member	Minimal field access. Can view the dashboard, tasks, properties, reservations, and devices.
7 (lowest)	Viewer	Read-only access. Can view the dashboard, properties, and reservations only.

Note

The hierarchy determines who can manage whom. For example, a Manager (priority 3) can edit a Member (priority 4) but cannot edit another Manager or an Admin.

Default Permissions by Role

Each role comes with a preset collection of permissions. The table below shows which permissions are enabled by default for each role.

Owner & Admin

Owner and Admin roles have all permissions enabled. They can access every module and perform every action in the platform.

Manager

Managers have broad access across most modules:

Module	Permissions
Dashboard	View
Tasks	View, Modify
Devices	View, Control
Properties	View, Modify
Reservations	View, Modify
Portals (Guides)	View, Modify
Integrations	View
Organization	View, Manage
Users	View, Manage
Access Codes	View lock codes, Manage lock codes, View staff codes
Events	View
Analytics	View
Workflows	View
Payments	View
Inbox	View, Manage

Caution

Managers cannot delete properties, tasks, task templates, workflows, users, or guides. They also cannot access account admin settings or manage integrations. Only Owners and Admins have delete and account-level permissions.

Field Supervisor

Field Supervisors are designed for team leads who oversee on-site operations:

Module	Permissions
Dashboard	View
Tasks	View, Modify
Devices	View
Properties	View
Reservations	View
Access Codes	View lock codes, View staff codes
Events	View

Field Team Member

Field Team Members have the minimum access needed to do their on-site work:

Module	Permissions
Dashboard	View
Tasks	View
Properties	View
Reservations	View
Devices	View

Member

Members have basic read-only access:

Module	Permissions
Dashboard	View
Properties	View
Reservations	View
Devices	View

Viewer

Viewers have the most restricted access:

Module	Permissions
Dashboard	View
Properties	View
Reservations	View

Custom

The Custom role starts with no permissions. When you assign this role, you manually select exactly which permissions the user should have using the checkboxes in the Permissions tab.

Permission Categories

Permissions are grouped into the following categories. Each category contains one or more granular permissions:

Category	Available Permissions
Dashboard	View
Tasks	View, Modify, Delete
Task Templates	View, Manage, Delete
Devices	View, Control, Modify
Properties	View, Modify, Delete
Reservations	View, Modify
Portals	View, Modify, Delete
Integrations	View, Manage
Organization	View, Manage
Users	View, Manage, Delete
Access Codes	Private code, View lock codes, Manage lock codes, View staff codes
Events	View
Analytics	View analytics, View logs
Workflows	View, Manage, Delete
Payments	View, Manage
Inbox	View, Manage
Booking Engine	View, Manage
Account	Account admin

Note

The View permission for a module lets the user see the page and its data. The Modify or Manage permission lets them create and edit records. The Delete permission lets them remove records. These are additive — a user needs both View and Modify to edit records in a module.

Assigning and Changing Roles

To change a team member’s role or customize their permissions:

1. Navigate to Organization > Members in the sidebar
2. Select the team member you want to update
3. Go to the Permissions tab
4. Select a role from the dropdown, or choose Custom to manually configure permissions
5. If using a custom role, check or uncheck individual permissions as needed
6. Click Update to save

For step-by-step instructions, see Managing User Access & Permissions.