User Roles & Permissions
Faciotech uses a role-based access control system so you can give each team member exactly the access they need — nothing more.
Creating a New User
- Go to Team in the left sidebar (or navigate to
/users) - Click Invite User
- Fill in the user's details:
- Full Name (required)
- Email (required)
- Password — set an initial password, or leave blank to auto-generate one
- Role — select from Admin, Manager, or Member
- Active — checkbox; new users are active by default
- Click Create User
The user can log in immediately using the email and password you set.
Role-Based Access Control
Faciotech's permission system is built on spatie/laravel-permission. Every action in the platform — viewing a contact, creating an invoice, approving a workflow — is governed by a named permission. Roles are collections of permissions that you assign to users.
Roles available in every tenant:
| Role | Access Level |
|---|---|
| Admin | Full access to all modules and workspace settings, including user management |
| Manager | Read/write access to modules; cannot manage users or workspace settings |
| Member | Standard access to modules; read-only on sensitive data where specified |
The role is assigned when the user is created and can be changed at any time by an Admin from the user's edit form.
Toggling User Active/Inactive Status
To temporarily suspend a user without deleting their account:
- Go to Team in the sidebar
- Find the user in the list and click Deactivate
Inactive users cannot log in. Their historical activity, records, and assigned items are preserved. Reactivate a user the same way by clicking Activate next to their name.
You cannot deactivate your own account.
User Profile Management
Users can update their own profile by clicking their avatar or name in the top-right corner and navigating to /profile:
- Display name
- Email address
- Password (requires the current password to change)
Admins can edit another user's name, email, password, role, and active status by opening their record in the Team list and clicking Edit.
See also: Tenant Settings for workspace-wide configuration, and Custom Domains for branded URL setup.