Roles and permissions
Four roles, plus individual grants for the things that don't fit neatly.
The four roles
| Viewer | Member | Manager | Admin | |
|---|---|---|---|---|
| See their own envelopes | ✓ | ✓ | ✓ | ✓ |
| Send envelopes | ✓ | ✓ | ✓ | |
| Create templates | ✓ | ✓ | ✓ | |
| Bulk send | ✓ | ✓ | ||
| Team reports | ✓ | ✓ | ||
| Share folders and templates | ✓ | ✓ | ||
| Account settings, users, branding | ✓ |
Individual grants
Some people need one manager power without the rest. An admin can grant bulk send, team reports or sharing to any individual under Admin → Users, without promoting them.
Grants are additive only — they can give someone a power their role lacks, never take away one their role includes. That means a role change can't silently strip permissions.
Enforcement
Permissions are checked on the server for every action, not just used to hide buttons. Calling the API with a member's key does not get you a manager's abilities.
Viewer is genuinely useful — an accountant or auditor who needs to read agreements and download signed copies but should never send anything.
Was this useful?