---
title: "Roles and permissions"
description: "Which portal screens each role can see: Operations, Fulfilment and Administrator."
---

> Documentation Index
> Fetch the complete documentation index at: http://localhost:4321/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and permissions

Every team member has one or more roles. A role decides which menu items appear for them, and the system enforces the same rules behind the scenes, so hiding a link isn't the only protection.

**Administrators can see and do everything.** The other two roles are narrower.

## What each role can use

| Menu item | Operations | Fulfilment | Administrator |
|---|:-:|:-:|:-:|
| **Operations** > Bookings | ✓ | | ✓ |
| Check in | ✓ | | ✓ |
| Customers | ✓ | | ✓ |
| Statistics | | | ✓ |
| Tickets | | | ✓ |
| Passes | | | ✓ |
| Vouchers | | | ✓ |
| Events | | | ✓ |
| Slots | | | ✓ |
| Closures | | | ✓ |
| **Merchandise** > Fulfilment | | ✓ | ✓ |
| Orders | | ✓ | ✓ |
| Products | | | ✓ |
| Categories | | | ✓ |
| Postage | | | ✓ |
| **Marketing** > Configuration, Integrations, Export | | | ✓ |
| **Compliance** > Audit Log, Subject Access Request, Scrub Data | | | ✓ |
| **Administration** > Team, Payments, Email, Branding, Account | | | ✓ |
| **My profile** (own password, authenticator and passkeys) | ✓ | ✓ | ✓ |

## Choosing roles

| Person | Suggested role |
|---|---|
| Front-of-house, check-in staff | **Operations** |
| Whoever packs and posts merchandise | **Fulfilment** |
| Someone who does both | **Operations** and **Fulfilment** |
| Owner, manager, the person who sets prices | **Administrator** |

Give people the **least** they need. Fewer administrators means fewer people who can change prices, issue discounts, or see the audit log.

## Rules to know

- **At least one active administrator** must always exist.
- You **can't change your own roles** or deactivate yourself.
- Changing someone's roles, resetting their password, or deactivating them **signs out their current sessions immediately**.
- Every change is recorded in the [audit log](/compliance/audit-log).

How to add people and assign roles: [Team](/setup/team).

Source: http://localhost:4321/reference/roles-and-permissions/index.mdx