Staff roles and what each can do

Each person on your team signs in with their own account and a role. Shared accounts are not possible, so the audit log always names a real person.

Invite a person

1. Go to Settings › Staff and roles and choose Invite a person.
2. Type their name and their Work email, where the invite will go.
3. Choose a role, then Send invite.

They cannot sign in until two-step sign-in is set up.

Your plan sets how many staff seats you have: 2 on Starter, 5 on Growth, 15 on Pro, and no limit on Scale.

Only the account owner can invite people, change roles or remove access.

Manage a person

Open a person’s menu and choose Manage. From there you can:

• Save role after choosing a new one;
• Remove access…, and later Give access back;
• Resend invite if they never accepted it;
• Send a new password link;
• Reset two-step sign-in, which removes their authenticator, recovery codes and trusted computers;
• Sign out everywhere, for a lost or stolen phone or laptop. Their access, password and authenticator are kept.

The roles

Role	What it can do
Owner	Everything, including staff, gateways, export and closing the account.
Admin	Everything the owner can do, except closing the account, exporting all its data, changing the owner, and the plan and billing with Taji.
Finance	Invoices, payments, refunds (as maker or checker), reports, wholesale wallet.
Support	Customers, services, tickets, provisioning jobs. Sees invoices, cannot refund.
Sales	Customers, orders and quotes, promotions. Cannot change prices.
Read-only	Can look at everything except secrets. Changes nothing.

Who does what

Most lists and records are open to every role to look at. Supplier keys are never shown to anybody. This table shows who can make changes.

Action	Owner	Admin	Finance	Support	Sales	Read-only
Add a customer	Yes	Yes	No	Yes	Yes	No
Suspend a customer account	Yes	Yes	Yes	No	No	No
Email your customers	Yes	Yes	No	No	No	No
Create an invoice	Yes	Yes	Yes	No	No	No
Make an order or quote	Yes	Yes	Yes	No	Yes	No
Approve a hand-typed quote price	Yes	Yes	Yes	No	No	No
Send a payment link	Yes	Yes	Yes	Yes	No	No
Record a payment by hand	Yes	Yes	Yes	No	No	No
Approve a payment, slip or refund	Yes	Yes	Yes	No	No	No
Ask for a refund or credit note	Yes	Yes	Yes	No	No	No
Acknowledge a below-cost invoice	Yes	Yes	Yes	No	No	No
Approve suggested prices	Yes	Yes	Yes	No	No	No
Change products and domain prices	Yes	Yes	No	No	No	No
Create and end coupons	Yes	Yes	No	No	Yes	No
Change settings, suppliers and gateways	Yes	Yes	No	No	No	No
Invite staff and change roles	Yes	Yes	No	No	No	No
Suspend or restore a service	Yes	Yes	Yes	Yes	No	No
Remove a service from the server	Yes	Yes	No	No	No	No
Retry a provisioning job	Yes	Yes	No	Yes	No	No
Reply to tickets	Yes	Yes	Yes	Yes	Yes	No
See the audit log	Yes	Yes	Yes	No	No	Yes
See reports	Yes	Yes	Yes	No	No	Yes
Export CSV files	Yes	Yes	Yes	No	No	No
Top up the wholesale wallet	Yes	Yes	Yes	No	No	No
Start a WHMCS or ResellersPanel import	Yes	Yes	Yes	No	No	No
Run the real import and cut over	Yes	Yes	No	No	No	No
Export everything and close the account	Yes	No	No	No	No	No

Nobody approves their own payment, refund, credit note or quote. Maker and checker are always two different people.

If something goes wrong

If a staff member is locked out, the owner can choose Reset two-step sign-in for them. If that does not help, contact Taji support at [email protected] or +250782009639.