Roles & permissions: who can see and do what

Roles decide what each kind of person can see and do: the front desk, trainers, managers, accountants. Everyone sees only the menu, pages and buttons their roles allow, and the server checks every action too. Duke follows the same rules: when someone asks Duke something, he can only see and do what that person can.

Open roles

Go to Settings → Team and roles and choose the Roles tab. Each role shows a summary of its access (for example “CRM: Edit · Memberships: View”) and how many people hold it.

The Owner role

Every business has a built-in Owner role that always has every permission. It can't be edited or deleted, and a business always needs at least one owner.

Access levels

For each area of the app (CRM, Memberships, Bookings, Invoicing, the assistant, custom pages, business settings, team and roles…) a role has one of four levels:

Each level includes the ones below it. For finer control, expand an area and tick single permissions; the area then shows Custom.

Create a role

1. On the Roles tab, click New role.
2. Enter a Name (for example “Front desk”) and a description if you like.
3. Under Start from a ready-made role, pick one to start from:
   • Manager: runs the day-to-day, everything except the team, business settings and billing.
   • Staff: works with customers; sees and changes records but can't delete them or change settings.
   • Read only: sees records and numbers, changes nothing.
   • Roles for your type of business, such as Front desk, Trainer, Practitioner, Stylist or Sales agent.
4. Under Access, adjust the level for each area.
5. Check What they'll see: a live preview of the menu this role gets.
6. Click Save role.

Give someone a role

On the People tab, click Roles next to the person, choose Add a role, pick the branch it applies to (every branch, or only one) and click Add. A person can hold several roles. You choose the role when you invite someone, too. See Inviting your team.

Rules that keep you safe

• Nobody can give or manage permissions they don't have themselves.
• The last owner can't be removed.
• A role can't be deleted while people hold it or invitations use it.
• A role given for one branch applies only in that branch.