1. SaaS CRM
  2. Roles and Access
Reference

Who can do what in SaaS CRM

Separate account administration, relationship ownership and independent commercial decisions.

How permissions work

Relationship ownership

Relationship Owner prepares assigned opportunity work and renewal reviews. Protected transitions follow the guarded actions and their evidence checks.

Independent decisions

Sales Manager reviews authorized evidence and makes independent decisions through the review actions. Direct record editing is separate from approval authority.

Administrative responsibility

App Administrator maintains accounts, organizations and team membership. Admin handles user provisioning. Neither responsibility grants business approval authority.

Read-only inspection

Auditor reads authorized records and evidence without changing them or executing actions. Organization scope applies to the evidence they can inspect.

Who can do what

Permissions by role
RoleAccounts and TeamSales PipelineActivity and EvidenceSubscription ReviewsIndependent ReviewOperation Reconciliation
App AdministratorEditEditEditEditEdit—
Relationship OwnerViewEditEditEditViewView
AuditorViewViewViewViewViewView
Sales ManagerViewViewViewViewViewView
AdminEditViewViewViewView—

Each role in detail

App Administrator

Maintain organization, membership, and account configuration without business approval authority.

Can

  • Manage Accounts, Organizations, team members

Starts on: Active Accounts

Relationship Owner

Prepare assigned operational drafts; guarded workflows own review and protected transitions.

Can

  • Manage Opportunities, record attachments, relationship activities, subscription reviews
  • View Accounts, operation receipts, review decisions

Starts on: Renewal Review Queue

Auditor

Read authorized evidence and reports only; no record mutation or workflow execution.

Can

  • View Accounts, operation receipts, Opportunities, Organizations, record attachments, relationship activities, review decisions, subscription reviews, team members

Starts on: Renewal Review Queue

Sales Manager

Read authorized evidence and execute independent guarded review actions without direct record editing.

Can

  • View Accounts, operation receipts, Opportunities, Organizations, record attachments, relationship activities, review decisions, subscription reviews, team members

Starts on: Renewal Review Queue

Admin

Maintain user provisioning and read-only membership checks without business approval authority.

Can

  • Manage Users
  • View Organizations, team members

Set up SaaS CRM your way.

Start free, then use Proto to change fields, steps and approvals before your team goes live.

How to get started