Get started

Tenancy & RBAC

Every piece of data belongs to an Org. Below that, projects can optionally belong to a Company and/or Portfolio. Row-Level Security enforces isolation, a user in one org can never see another org's data.

LayerRoles
Orgowner · admin · member
Companymanager · member
Portfoliomanager · member
Projectmanager · contributor · viewer
Guestexternal, project-scoped, seat-exempt

Guests are external collaborators invited to a single project. They are seat-exempt (do not count against your plan limit) and fenced: no access to the directory, HR, or finance, and they see only the projects shared with them. Invite one from any project detail page.

Teams group members for assignment and visibility. Create them under Users → Teams, then assign a team to tasks.

Feature entitlements (CRM, HR, Risk, Financial, Portfolios, Integrations, Audit) are plan-controlled. Modules not in your plan are hidden from nav automatically.

Was this page useful?