Users, roles and permissions
Two roles, Admin (everything) and Employee (daily CRM functionality). You invite team members, manage their accounts, and the RBAC system determines who is allowed to do what.
When do you use this?
Section titled “When do you use this?”- A new agent joins, invite them
- A team member leaves, deactivate the account
- Promote an Employee to Admin
The overview
Section titled “The overview”Settings → Users in the sidebar. Table with:
| Column | Description |
|---|---|
| Name | Full name (or email if no name) |
| Email address | |
| Status | Active / Inactive / Pending |
| Role | Admin or Employee |
| Job Title | Job title |
| Created At | Creation date |
| Last Login Date | Last login |
Searching and filtering
Section titled “Searching and filtering”- Search text: first name, last name, email, job title
- Status filter: Active, Inactive, Pending, or all
Two roles
Section titled “Two roles”Full access. Admins can:
- View and edit all modules and data
- Invite and manage users
- Configure company settings
- Import and export
- Subscriptions and billing
Daily CRM functionality. RBAC determines exactly:
- View and manage properties, contacts, leads, deals
- Send and receive emails
- Tasks and meetings
- Their own personal settings
Inviting a new user
Section titled “Inviting a new user”- Settings → Users.
- Click Invite User.
- Select role: Admin or Employee.
- Enter email address(es). Multiple are allowed, comma-separated. Each must be unique and valid.
- Click Invite User → the system sends an invitation email per address.
Upon acceptance: the user follows the link, registers a password, and gains access.
Managing an existing user
Section titled “Managing an existing user”Click a user in the overview → detail page + actions:
| Action | Description |
|---|---|
| Edit | Name, role, job title, contact details |
| Deactivate | Status → Inactive (cannot log in) |
| Reactivate | Status back to → Active |
| Resend Invitation | When Pending, new email |
Deleting a user
Section titled “Deleting a user”For permanent deletion: first transfer all assigned records (leads, contacts, deals, properties) via Mass Edit Assign To.
RBAC: Role-Based Access Control
Section titled “RBAC: Role-Based Access Control”Per role, which actions are allowed. Examples:
| Resource | Admin | Employee |
|---|---|---|
| Properties | Full | Full |
| Contacts + Leads | Full | Full |
| Deals | Full | Full |
| Imports | Yes | No |
| Settings | Yes | Own Personal Settings |
| Users | Yes | No |
| API Keys | Yes | No |
| Webhooks | Yes | No |
Specific actions per resource can be checked in the admin settings. Some actions (Mass Delete, permanently deleting land registry history) are always Admin only.
Common mistakes
Section titled “Common mistakes”Invitation not received
Section titled “Invitation not received”- Check the spam folder
- Ask Tesoro or check that the email settings are correct in Settings → Company Settings → Email Settings
- Send Resend Invitation again
User cannot log in
Section titled “User cannot log in”- Is the status Active?
- Has the invitation been accepted? If Pending, not yet.
- Forgot password? Use “Forgot password” on the login page.
Transferring records when a team member leaves
Section titled “Transferring records when a team member leaves”Mass Edit Assign To on all records belonging to this team member, before deactivation or deletion.