> ## Documentation Index
> Fetch the complete documentation index at: https://flow9.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Users, roles & permissions

> Invite your team, shape the org structure, and control who can see and do what.

## Add users

**Settings → Users → Create User** takes an email, full name, **role**, and
status. Leave the password blank to auto-generate a temporary one — the new
user gets a welcome email with their login details. You can also set the
user's **initial visibility**: pick the org nodes whose data they can see,
each as *full* access or *own records only*.

<Info>
  Re-creating a deactivated user's email reactivates their account.
</Info>

## Roles

Funnel ships with a role ladder — **Company\_Admin** (everything in the
workspace), **VP\_Sales** (company-wide sales), **Branch\_Manager**
(branch-scoped), **Team\_Lead** (team-scoped), and **Sales\_Agent** (own
records). You can also create your own roles (below). Company Admins can
assign any role except platform administrator.

## Organization structure

**Settings → Organization Structure** models your company as a tree —
**Region → Country → Area → Branch → Team** — with a table and tree view.
Records and visibility scope to these nodes, so a Branch Manager sees their
branch, a Team Lead their team.

## Access Control

**Settings → Access Control** is the permission center, in three tabs:

1. **Permission Profiles** — a **module × action** grid per role: for each
   module (Leads, Deals, Customers, Campaigns, Fax, Inbox, Reports, Billing,
   custom objects, and more) toggle **View / Create / Edit / Delete /
   Assign / Configure**. *View* is the prerequisite the others build on.
   **New Role** creates a custom role with its own empty profile.
2. **Data Scope** — how far each role's reach extends: **Own → Team →
   Branch → Company**.
3. **Users & Overrides** — per-user exceptions when someone needs more (or
   less) than their role.

<Tip>
  Think of it as: the **profile** says *what* a role can do, the **scope**
  says *whose records* it applies to, and **overrides** handle the
  exceptions.
</Tip>