/docs/settings/roles-users
Roles & users
Who can see inventory, money, and settings should match the job — not a shared password.
Purpose
FlashFender separates users (people who log in) from roles (permission bundles). Admins invite staff, pick a role, and revoke access when someone leaves.
Setup
- Finish Business settings first (dealership identity).
- Open Users — invite with work email (no shared logins).
- Assign the least privilege role that still lets them do the job (BDC vs sales vs manager vs admin).
- Open Roles only when you need to understand or adjust what a role can access — do not widen admin casually.
Daily workflow
- New hire — invite → role → confirm they land on Dashboard, not Settings secrets.
- Role change — update on the user record the same day (promotion or desk move).
- Offboarding — disable the user immediately; do not reuse accounts.
- Periodic access review — managers confirm salespeople cannot open Users, platform admin, or integration secrets.
Key ideas
| Concept | Notes |
|---|---|
| Least privilege | Sales should not edit integrations or billing |
| One person, one login | Audit trails and soft-lock behaviour depend on it |
| Role vs user | Change the user’s role assignment; avoid cloning admin |
Permissions (typical)
- Admin — Users + Roles + Settings.
- Manager — may see team users depending on role; usually cannot edit roles.
- Sales / BDC — profile only; no user admin.
Exact matrix can vary by dealership role config — verify in-app under Roles before go-live.
Canadian notes
- Privacy: staff access to buyer PII (credit apps, licences) should match who needs it for the deal.
- When a salesperson leaves mid-pipeline, reassign leads, tasks, and follow-ups before disabling the account.