Look up every role permission

A list of all 43 permissions by case page section, what each allows, and what the staff and clients roles get by default.

Updated Nov 13, 2026

In this article11 sections

This page lists the 43 permissions a role can hold, section by section as Edit Role shows them, and what the staff and clients roles get. Edit Role shows 40 of them: the three e-sign permissions marked below aren't in it.

How permissions work

A section switched off in Settings › Modules is hidden from everyone, whatever their role holds.
On a closed case, nobody can change anything on the case page, whatever their role holds.
The create, update and delete permissions act only on what the person added, unless their role also has the section's moderate permission.
People see the forms, e-signs, tasks and invoices sent to them, and those they created. They see the posts, notes and events open to everyone, to their role, or written by them.
Filling in a form, signing, setting a task's status and answering an event invitation need no permission of their own: anyone the item is sent to can, as long as their role holds any permission in its section.
A moderate permission allows everything in its section, on everyone's items, within the limits below.
The bots role, the Virtual Assistant's, holds the same permissions as staff.

Case

Permission	What it allows
Read all case fields specified in the role	See the case's Overview, showing the details ticked in the role's list, such as its stage, status and custom fields.
Update all case fields specified in the role	Change, on Overview, the details ticked in the role's list: the status, the stage and custom fields. The title, description and date opened are in the list too, for a hub key to change. A role that can change the status can close a case, but a closed case can only be reopened in the Admin Panel.

By default, staff and clients read the case's details, its stage included, and staff also read its description. Staff can also change the status and the stage. Clients can't change a detail until you tick one in their change list.

Convos

Permission	What it allows
Get all convos	Join the case's call and see who's in it.
End a convo	End the case's call for everyone in it, with End call for everyone. A new role made from the Standard preset doesn't have it.
Moderate a convos	Everything in Convos, ending a call for everyone included.

By default, staff moderate Convos, and clients can join calls.

Events

Permission	What it allows
Get all events	See the events open to everyone, to their role, or created by them, and who's coming.
Create or update an event	Add events, choosing who's invited and which roles see them, and change their own.
Delete an event	Delete events they created.
Moderate events	Change or delete anyone's event, and see every event in the list of all events.

By default, staff moderate Events, and clients can see events and answer the ones they're invited to. To let clients add events, tick Create or update an event for them; the same goes for forms, e-signs and tasks.

Posts

Permission	What it allows
Get all posts	See the Feed's posts open to everyone, to their role, or written by them, with their comments.
Create or update a post	Add posts, choosing who sees them, and edit their own.
Delete a post	Delete their own posts.
Comment or update on a post	Comment on the posts they can see, attach files to their comments, and edit their own comments.
Delete a comment on a post	Delete their own comments, and any comment on their own posts.
Moderate posts	See every post and comment, and delete anyone's. Moderators can't rewrite someone else's post or comment.

By default, staff moderate Posts, and clients have every Posts permission but that one.

Forms

Permission	What it allows
Get all forms	See the forms sent to them and those they created, and the form templates open to their role.
Create or update a form	Add forms, from a template or from scratch, and change and publish their own. A form's document can't change once it's published.
Delete a form	Delete forms they created, answered or not.
Delete a submitted form	Clear a submitted answer so the form can be filled in again. Staff who moderate Forms do it from Submissions, for anyone's answer. Without that, it covers only the person's own answer, and no screen offers it.
Moderate forms	See every form and every answer, and change, publish and delete anyone's form. Moderators answer only forms sent to them.

By default, staff moderate Forms, and clients can see and fill in the forms sent to them.

E-signs

Permission	What it allows
Get all signs	See the e-signs sent to them and those they created.
Create or update a sign	Add e-signs, and change and publish their own until they're published.
Delete a sign	Delete e-signs they created, signed or not.
Comment or update on a sign	Comment on an e-sign. The case page doesn't show e-sign comments, so this has no effect there. Not in Edit Role: a role that has it keeps it, and a new role doesn't get it.
Delete a comment on a sign	Delete e-sign comments. No effect on the case page, as above. Not in Edit Role, as above.
Delete a signed form	Withdraw a signature before everyone has signed. No screen offers it. Not in Edit Role, as above.
Moderate signs	See every e-sign, change anyone's before it's published, and delete anyone's.

By default, staff moderate E-signs, and clients can see and sign the e-signs sent to them.

Invoices

Permission	What it allows
Get all invoices	See the invoices billed to them and those they created.
Create or update an invoice	Create invoices, and change, publish and mark as paid or void their own.
Delete an invoice	Delete their own invoices before they're published. Nobody can delete a published invoice.
Pay an invoice	Pay online an unpaid invoice billed to them.
Moderate invoices	See every invoice, and change, publish, mark and delete anyone's. Moderators pay only invoices billed to them.

By default, staff moderate Invoices, and clients can see and pay the invoices billed to them.

Notes

Permission	What it allows
Get all notes	See the notes open to everyone or to their role, and their own.
Create or update a note	Add notes, choosing which roles see them, and change their own.
Delete a note	Delete their own notes.
Moderate notes	See every note, and change or delete anyone's.

By default, staff moderate Notes. Clients have no Notes permission, so they don't see Notes.

Tasks

Permission	What it allows
Get all tasks	See the tasks assigned to them and those they created, with their child tasks and comments.
Create or update a task	Add tasks and child tasks, and change their own.
Delete a task	Delete their own tasks, and the child tasks under them.
Comment or update on a task	Comment on the tasks they can see, attach files to their comments, and edit their own comments.
Delete a comment on a task	Delete their own comments, and any comment on their own tasks.
Moderate tasks	See every task, change and delete anyone's, and delete any comment.

By default, staff moderate Tasks, and clients can see the tasks assigned to them, set their status, and comment on them with files.

Team

Permission	What it allows
Get all teams	See who's on the case under Your Team, and pick them by name to mention or invite to an event. Without it, boxes a form, e-sign or note fills with your team's details stay empty for them.

By default, staff and clients both have it.

Was this article helpful?

Change what a role can doEdit a role's permissions, the case fields it can read or change, and its upload limits, including the built-in roles.Security & account · 5 min

Understand user types and rolesLearn how the Admin, Manager and User types decide who opens the Admin Panel, and how case roles decide what each person can do on a case.Getting started