Five Role Types with Granular Permissions and Custom Dashboards
Admin, Owner, Manager, Technician, and Client roles each see exactly what they need. Row-Level Security enforces data access at the database level, not just the UI.
The Problem
Service businesses with multiple team members need clear boundaries between who can see and do what.
Everyone Sees Everything
In a shared spreadsheet or basic CRM, every employee can see client payment details, revenue numbers, and other team members' performance. Sensitive financial data should only be visible to business owners.
Technicians Distracted by Irrelevant Data
Field workers forced to navigate through invoicing, billing, and client management screens waste time finding the one page they actually need: their daily job list.
No Way to Limit Manager Authority
Managers need to create work orders and manage clients, but they should not change billing settings or invite new team members. Without role-specific permissions, businesses choose between too much access or too little.
How It Works
Key Capabilities
Owner Dashboard and Full Control
Owners see organization-wide metrics, manage all clients, work orders, and invoices, control billing and subscriptions, invite team members, and configure every setting in the CRM.
Manager Operations View
Managers access the org dashboard, create and edit clients, services, and work orders, view invoices and reports, and access the team page to invite technicians. Billing and subscription settings are hidden.
Technician Field Dashboard
Technicians see only their assigned work orders on a dedicated dashboard with an interactive map. Quick status actions let them mark jobs in progress or complete from the field. Client access is read-only and filtered to their assigned clients.
Client Portal Access
Clients log into a branded portal showing only their own work orders, invoices, photos, and subscriptions. They can send messages to the business but have zero visibility into other clients or internal operations.
Role-Specific Sidebar Navigation
The sidebar dynamically adjusts based on role. Technicians do not see invoices or branches. Managers do not see billing or subscription pages. Clients see only portal navigation. No confusing menu items.
Server-Side Role Guards
Every server action validates the user's role before executing. A technician calling an owner-only API endpoint receives an access denied error. Protection works at both the page and action level.
See It in Action
See how different roles experience the CRM, from an owner managing the full business to a technician viewing their daily job list.
Total Clients
Monthly Revenue
Team Members
Full CRM Access
All clients, work orders, invoices, reports, and settings
Billing and Subscription Management
Stripe Connect, subscription tiers, usage meters
Team Invitations
Invite managers and technicians with role assignment
Organization Settings
Company details, branding, API keys, AI configuration
Frequently Asked Questions
Admin is for Smarfle platform operators. Owner is for business founders who need full access. Manager is for office staff handling daily operations. Technician is for field workers who need only their job list. Client is for customers accessing their portal.
Managers can view invoices and reports including revenue charts. However, they cannot access billing settings, subscription management, or Stripe configuration. Financial visibility is operational, not administrative.
Every database table has Row-Level Security policies that use SECURITY DEFINER helper functions to check the user's role and organization. Even direct API calls or database queries respect these policies. The UI hides menus, but the database enforces the rules.
The five roles have fixed permission sets designed for service businesses. Owners see everything, managers handle operations, technicians see their jobs, and clients see their own data. Custom role creation is not currently supported, but the existing roles cover standard service business workflows.
Pricing
Role-Based Access on Every Plan
All five role types are available on every subscription tier. Seat limits vary by plan: Starter allows 3 users, Professional allows 15, and Business allows 50.
Included in all plans
View all plansRelated Features
Team Management
Invite and manage team members from the Team page with role assignments, temporary passwords, and tier-based seat enforcement.
Learn moreClient Self-Onboarding Portal
The Client role powers the self-service portal where customers register, track jobs, and pay invoices through a branded interface.
Learn moreJob and Work Order Management
Work orders are the core entity that connects roles. Owners create them, managers assign them, technicians complete them, and clients track them.
Learn moreReady to try Manager, Technician, and Client Accounts?
Start your 7-day free trial. No credit card required.