Roles & Permissions

Roles and permissions are shared across every module — set them up once here, and they apply consistently whether someone’s touching payroll, invoices, deals, or the storefront.

1. Review the default roles (Admin, Manager, Employee, etc.) — GEMS ships with sensible defaults for most teams.
2. Create custom roles if your org needs finer-grained access (e.g. “Payroll only,” “Sales read-only”).
3. Assign module-level permissions per role — a role can have full access to CRM and none to ERP, for example.
4. Assign roles to your invited team — see Inviting Your Team if you haven’t added everyone yet.
5. Audit periodically — review who has admin access at least quarterly, especially after team changes.