Skip to main content

User rights management

Set your team's permissions to keep your data protected

A role is a set of rights that determines, for the user(s) it's assigned to, what they can see and/or do in your Ezus collaborative workspace.

There are roles already created by default that you simply assign to your team members. If needed, you can also create custom roles based on how your company is organized.

💡 Role customization is only available with a Premium subscription and above.

1. What are the default roles?

Because we know you work with varied profiles, sometimes hire for short periods, and that your data is valuable, we've created four default roles. Here's what each one can do, at a glance:

Super-Admin

Administrator

User

Collaborator

Work on their own projects*

✅

✅

✅

✅

Finalize or delete an invoice (Sales)

✅

✅

✅

❌

Close a project

✅

✅

✅

❌

View others' projects/clients/suppliers

✅

✅

✅

❌

Assign projects/clients/suppliers

✅

✅

✅

❌

Edit categories & destinations

✅

✅

✅

❌

Delete (projects, clients, suppliers, products)

✅

✅

❌

❌

Export data

✅

✅

❌

❌

Edit custom fields

✅

✅

❌

❌

Edit general settings

✅

✅

❌

❌

Manage mailbox settings

✅

✅

❌

❌

Manage the team (roles, add/remove)

✅

✅ **

❌

❌

Manage the subscription

✅

✅

❌

❌

* A user’s “own files” are the projects for which they are the sales advisor or the project manager.

** The Administrator can manage all members except the Super-Admin, who is the company's account holder.

In summary:

  1. The Super-Admin can do everything. They manage the team in the company's collaborative workspace and handle subscription plans.

  2. The Administrator has the same rights as the Super-Admin, the only difference being that they cannot edit or delete Super-Admins in the workspace.

  3. The User works on the whole team’s files, but cannot administer the workspace: no exporting, no deleting and no changing configuration settings.

  4. The Collaborator has a more restricted scope: they only work on their own projects, without seeing or assigning others'. They cannot finalize a sales invoice or close a project. This role is particularly well suited to referral partners, for example.

2. Custom roles

In addition to the four default roles, Ezus lets you create your own roles to match your team's organization as closely as possible.

💡 You can create as many custom roles as you need.

Only Super-Admins and Administrators can create and edit roles.

To do this, go to Settings > Team and click the "Customize user roles" button.

Two ways to proceed depending on your need:

  • You want to edit an existing role

Select the relevant role from the drop-down menu, then adjust the necessary permissions.

⚠️ As soon as you save, the change is applied instantly to all users attached to this role.

  • You want to create a new role

Click the pink + button.

We suggest using a descriptive name, as in the example above.

Then select the existing role to start from (the one whose permission level is closest), and adjust the desired permissions.

The settings here are more granular than those of the default roles: you precisely allow or restrict each action according to your team's needs.

Understanding the “User-owned” level

For projects, some rights offer a level limited to the user’s own projects:

  • User-owned objects: projects for which the user is the sales advisor or the project manager;

  • User-owned or unassigned objects: those same projects, plus those with neither a sales advisor nor a project manager.

This level applies to the projects list, the project itself, the calendar and the travellers.

Once the role is created, don't forget to assign it to the relevant users. To do this, click the "Back to user management" button.

Rights required for certain actions

Some actions depend on a specific right. If one of your team members can’t see a button or can’t save a change, check their role:

Action

Right required

Edit a project’s purchases (suppliers, invoices, payments), in the project as well as in Finances > Purchases and on the supplier sheet

Purchase invoices: edit

Delete a purchase invoice or a supplier payment

Purchase invoices: delete

Edit, delete or assign a role

Billing & Team

Set up the default Client Space, save or duplicate a web page template

Document Models: edit

Add a webhook

Settings: edit

View the agency’s Stripe account

Payment link

Delete the agency’s Stripe account

Payment link and Settings: edit

Apply a season group to products

Products & Packages: edit

⚠️ Without the right to edit purchase invoices, purchases are shown read-only: a locked cell shows a no-permission message. A role allowed to edit but not delete can update purchases, but can no longer delete invoices or payments.

3. How do you assign roles to users?

To learn more about how to invite a team member to join your Ezus workspace, see our article ✍️ Add a new user.

A role can be assigned in two ways:

  • When creating a user: click the pink "Add a new user" button, then fill in at least the fields shown below:

  • For an existing user: click the icon to the right of the role to edit it, as shown below:

Did this answer your question?