Team permissions
Your assistant doesn't need to see every client
Admin or member is not enough for a real practice. Set which clients each person sees and which modules they use, then save it as a role.
7-day free trial, no card needed
Priya Rao
Member 路 Access
Data scope
- All clientsSees every client in the orgOn
- Their teamSkilled migration 路 4 members
Clients Priya sees
Arjun MehtaSubclass 482 路 Assessment
Omar HaddadSubclass 482 路 Lodged
Hana SatoSubclass 190 路 Assessment
6 clients - every client in the firm
Three axes. Layer them however you need.
Each one tightens what a member can do. Use one, two or all three. Existing teams keep working until you do.
- Data scope
- Every client, the clients of their team or only the clients assigned to them.
- Module access
- Switch off any of ten modules and it leaves the sidebar and its routes.
- Role templates
- Save a set of switches as a named role and apply it to the next hire.
Enforced on the server. Not hidden in the interface.
The in-app list, a CSV export, a Harper query and a direct request to the API all apply the same rule. A blocked module refuses the whole route rather than hiding a button. Removing an assignment cuts access straight away.
Built for how practices actually run. Each set-up is a few clicks in settings.
- An assistant on billing only
- Block clients, cases, communications and Harper. Leave invoices and reports on.
- A contractor on one matter
- Assigned only, with the two clients they work on. Nothing else is in view.
- A skilled migration pod
- Two case managers and a lead share a team scope and nothing from the family side.
Questions firms ask.
What does it cost?
Nothing extra. Data scope, module switches and role templates are included with every Pro plan.
Which modules can be switched off?
Ten: clients, cases, communications, Harper, documents, invoices, reports, billing, settings and team management. Defaults follow the admin and member roles. Billing always stays on for an admin, so the firm can always renew its plan.
Does Harper respect a member's scope?
Yes. Harper, migration AI, will not read a client outside the scope of the person asking.
What happens to members when a role template changes?
Pair a role with a sub-team to make it the team default, then press Sync to push the change. Roles are saved snapshots, so deleting one later never regrants access.
Can another firm ever see our clients?
No. Every firm is isolated at the database, whatever its own permission settings are.
Start with the defaults, tighten as you grow.
New members start as admin or member. Narrow their scope or block a module the day you need to.
7-day free trial, no card needed