Skip to main content

Roles & Permissions

Partsemble uses role-based access control to manage what each team member can see and do. Every member has a role, and each role has a configurable set of permissions.

Settings Permissions page listing roles and their assigned capabilities

Roles

Owner — full access to everything. There is exactly one owner per business. The owner always has all permissions granted — this cannot be changed. Only the owner can cancel the service.

Admin — broad access by default, suitable for managers or co-owners who need to configure settings, manage the team, and oversee operations. Admins can do most things the owner can, except cancel the service.

Accountant — focused on financial and integration tasks. Default access to syncing, importing, exporting, and viewing inventory. No team management or QA approval access by default.

Builder — focused on production. Default access to viewing inventory, managing BOMs, executing builds, and viewing the dashboard. Limited access to settings and exports by default.

Customizing Permissions

Permissions are fully customizable per role per business. Navigate to Settings → Permissions to see the current permission matrix. Toggle individual permissions on or off for any role.

Only users with the manage_team permission can modify permissions. The owner can modify permissions for all roles. Admins can modify permissions for Accountant and Builder roles, but not for other Admins.

Permission Reference

Permissions grid comparing capabilities across Admin, Accountant, and Builder roles

Billing & Service

PermissionDescriptionAdminAccountantBuilder
Manage BillingAccess billing settings and payment methodsYesNoNo
Cancel ServiceCancel the Partsemble subscriptionOwner onlyOwner onlyOwner only

Team & Settings

PermissionDescriptionAdminAccountantBuilder
Manage TeamInvite, remove, and change member rolesYesNoNo
Enable/Disable FeaturesToggle business feature settingsYesNoNo

Integrations

PermissionDescriptionAdminAccountantBuilder
Manage QBO ConnectionConnect, disconnect, and configure accountingYesYesNo
Sync ItemsTrigger item syncs from accountingYesYesNo
Import Items as ProductsImport accounting items into PartsembleYesYesNo
Manage Export SettingsConfigure export accounts and modesYesYesNo

Inventory & BOMs

PermissionDescriptionAdminAccountantBuilder
View Products & StockSee products, stock levels, and transactionsYesYesYes
Manage ProductsEdit product types and settingsYesNoNo
Create/Edit BOMsBuild and modify bills of materialsYesYesYes

Builds

PermissionDescriptionAdminAccountantBuilder
Execute BuildsRun planned or quick buildsYesYesYes
Edit Planned BuildsModify planned build materials and costsYesNoNo
Quick Build (Unplanned)Execute builds without planning firstYesNoNo
Export Builds to QBOSend builds to accounting systemYesYesNo
View Export StatusSee export results and reference numbersYesYesYes
View DashboardAccess the main dashboardYesYesYes

QA

PermissionDescriptionAdminAccountantBuilder
Approve/Reject BuildsPerform QA review on executed buildsYesNoNo
Assign BuildsAssign planned builds to team membersYesNoNo

Receiving

PermissionDescriptionAdminAccountantBuilder
Create/Edit ReceiptsCreate and manage receiptsYesNoNo
View Receipts & LotsSee receipt history and lot detailsYesNoNo
Manage SuppliersCreate and edit suppliersYesNoNo
Sync SuppliersPull suppliers from accountingYesNoNo
Adjust LotsMake stock corrections on lotsYesNoNo

Sales

PermissionDescriptionAdminAccountantBuilder
View SalesSee sales and margin dataYesNoNo
Create Manual SalesEnter sales manuallyYesNoNo
Sync SalesTrigger sales sync from accountingYesNoNo
info

The defaults shown above are the starting configuration for new businesses. You can customize every permission (except Cancel Service) for each role to match your team's workflow.

How Permissions Are Enforced

Permissions are checked on every API request. If a team member tries to access a feature they don't have permission for, they see an access denied message. The UI also hides or disables elements that the current user can't access, so team members only see what's relevant to their role.