---
title: "Roles & Permissions Reference"
description: "This is a reference for HiveCRM's built-in roles and what each one can access."
url: "https://hiveplugins.com/docs/roles-permissions-reference/"
updated: "2026-09-27"
category: HiveCRM
---

# Roles & Permissions Reference

This is a reference for HiveCRM's built-in roles and what each one can access.

## Admin

Full access to every CRM module and every setting, including team management — the only role that can add, edit, or remove other Admins.

## Manager

Broad access to CRM data and most settings, including managing Staff and Client accounts. Managers **cannot** create, promote, or edit a team member into the Admin role — this is intentionally restricted so a Manager account can never grant itself (or anyone else) Admin-level access.

## Staff

Works with the CRM entities they've been given capabilities for (leads, deals, contacts, projects, tasks, tickets, estimates, invoices, and so on). If **Assigned Records Only** is enabled under [Team & Staff Overview](team-staff-overview.md), a Staff member only sees records assigned to them rather than the entire CRM.

## Client

No access to the WordPress admin area or CRM data directly. A Client role only ever sees their own records — their own deals, projects, invoices, and tickets — through the [Client Portal](client-portal-overview.md). A Client can never see another client's data.

## How Roles Are Assigned

Every staff member and client is a regular WordPress user with one of these four roles attached. You manage staff roles from [Adding & Managing Staff Members](adding-managing-staff-members.md); client portal accounts are created automatically when a contact is marked as a client, if **Auto-Provision Client Portal Account** is enabled under [Contact Settings](contact-settings.md).

## Related Documentation

- [Team & Staff Overview](team-staff-overview.md)
- [Adding & Managing Staff Members](adding-managing-staff-members.md)
- [Client Portal Overview](client-portal-overview.md)