Getting started
Inviting Users and Assigning Roles
Roles control what each person can see and do. This guide explains the four role tiers and how to invite people safely.
The role tiers
SysOS uses four roles, from least to most privileged. Assign the lowest role that lets someone do their job.
| Role | Can view | Can edit | Can administer |
|---|---|---|---|
| Viewer | Yes | No | No |
| Manager | Yes | Yes | No |
| Admin | Yes | Yes | Workspace settings, users |
| Super-admin | Yes | Yes | Platform-wide, cross-tenant |
Invite a user
- Open Users from the Admin section of the sidebar.
- Click Invite user and enter their work email.
- Choose a role and, optionally, restrict their section access.
- Send the invite. The user receives a setup link to create their password.
Section access
Section access is derived from the live navigation, so any module your plan includes can be granted or withheld per user without code changes.
- Leave section access empty to grant the role's full default access.
- Tick specific sections to limit a user to only those modules.
Best practices
- Reserve Admin for the few people who manage settings and billing.
- Use Viewer for auditors, contractors, and read-only stakeholders.
- Review the user list quarterly and remove anyone who has left.