Three roles. Exactly the access each one needs.
Admin runs the company account. General staff do the day-to-day work. External seats — clients, subcontractors, inspectors — see progress and complete the sign-offs they're sent, and nothing more.
| Area | Admin — runs the company account | General — does the operational work | External — clients & partners |
|---|---|---|---|
| Projects | Create, delete, rename, change status, manage membership | Work within assigned projects; can change the cover photo, not rename/status/delete | View-only within assigned projects; no project settings |
| Sections & items | Full control everywhere, including admin-only (sensitive) sections | Full control on normal sections in their projects; can't create or see admin-only ones unless granted access | Read-only, except completing a sign-off specifically sent to them |
| Client sign-off | Can prepare and send a section or whole-project sign-off request | Same, for projects they're a member of | Can complete a sign-off they were sent — nothing else |
| Tasks | Can assign a standalone task to anyone; sees the whole team's tasks | Can assign sections/items to teammates on shared projects; can't assign unrelated standalone tasks | No task screens at all |
| Team & seats | Invite, revoke, manage seats and roles, see pending invitations | Sees the team roster only — no invites, no revoke | Not available |
| Company profile | Edit company name, logo, address, phone and email | View only | Not available |
| Documents, forms, reports, warranty | Full access, including sharing controls for sensitive documents | Full access; a document stays hidden until an admin shares it | Not available |
| Shared libraries (statuses, locations, forms) | Create, edit and delete | Create and edit; can't delete a whole group | Not available |