Team roles and permissions

Choose a premade role

Open Settings, then find Team access. Select a role beside a team member. The change takes effect when the member loads the next page.

• Owner has every permission. Only an owner can manage custom roles or grant ownership.
• Administrator runs daily operations and can assign team roles.
• Operations manager manages channels, properties, availability, pricing, reservations, messages, tasks, and automations.
• Front desk manages availability, reservations, messages, and tasks.
• Team member manages messages and tasks.
• Viewer can read workspace data but cannot change it.

Create a custom role

An owner can select New custom role in Team access. Name the role, explain its purpose, and select only the permissions that the job needs.

You can change a custom role later. The new permission set applies to every member who has that role. You must move all members to another role before you delete it.

Permission catalog

• Organization changes the organization name and shared settings.
• Team assigns roles and changes member status.
• API keys creates, changes, and revokes integration keys.
• Channels connects and disconnects booking channels and outside tools.
• Properties changes listings, rooms, content, and photos.
• Availability changes sellable inventory and availability blocks.
• Pricing changes rates and booking restrictions.
• Reservations creates, moves, and cancels reservations.
• Messages sends guest replies and retries message delivery.
• Tasks creates tasks and changes their status.
• Automations creates automation rules and changes their status.

Delegate safely

A member with Team permission can assign premade and custom roles. That member can grant only permissions that are already in their own role.

A manager can change a member only when the manager has all of that member’s current permissions.

Delegated team managers cannot grant ownership. Only an owner can grant or remove ownership.

Agent access follows the member

The operations agent uses the signed-in member’s permissions. It does not offer a change tool that the member cannot use. Supahost checks the permission again before it makes a change.