Role presets

Every Export119 user has one of three role types on each company they belong to.

Owner

Full access. Bypasses every permission gate at every layer.
Set automatically for the user who created the company.
At least one Owner must always exist; removing the sole Owner is blocked.
Multiple Owners are allowed.
Can promote/demote other users.

Admin

Full access except platform-admin actions (suspending companies, deleting tenants, impersonating other companies).
Bypasses section permissions (R/W/E/D) — sees and edits everything within the company.
Cannot manage subscription / plan settings (those are Owner-only).

Custom

Bounded by section permissions (R/W/E/D) per section.
Bounded by per-view, per-vault, per-location ACLs where those layers exist.
Cannot edit the role definition itself (admins do that).
The “common” team member — bookkeeper, yard manager, sales rep — usually fits here.

Typical custom-role recipes

Bookkeeper

ledger:R/W/E, chart_of_accounts:R/W/E, financial_reports:R, vaults:R/E, currencies:R/W/E
cars:R (read-only — needs to see car cost for COGS verification)
No invoicing:W (can read invoices but not issue them)

Sales rep

cars:R/E (read + inline edits)
Bound to one “Showroom” view with canEditOfferingPrice = true
invoicing:R/W/E (issues sales invoices)
No vaults:* (can’t see cash flow)
No financial_reports:*

Yard manager

cars:R/E (read + change status/location)
containers:R (read-only — sees which cars are on which container)
No invoicing:*
No financial_reports:*

Forwarder ops

shipping_schedules:R/W/E/D
containers:R/W/E
customs_permits:R (oversight)
No cars:* (forwarders don’t have a cars sidebar item)

Adding a custom role

Open Settings → Roles & Permissions. Click + New role. The matrix shows every section your company type exposes; check boxes for each RWED flag. Save. Apply to specific team members from Settings → Team.