How to set who can read, create, or approve a record
This lives under Config. Open the Permissions tab. Who can read, create, update, delete, or approve each type of record. If the tab is missing, that editor is off or your role cannot open it.
Roles themselves are listed under Organization → Roles. You assign a role on the user. You do not invent a new role from that list.
How to set role lists on a model
- Open Config. Click Permissions.
- Open a record type.
- Set which roles can read, create, update, delete, or approve that type.
Example: Members can read a deal. Only Leads and above can delete one. Who can approve an OKR is a list on that model, not a one-off button.
Access levels
- Open the nested Access Levels tab on Permissions.
- Levels sit on the person. A level can unlock a module even when the role list would hide it.
- Assign the level on the user under Organization → Users, the same place you assign the role.
Example: Members cannot open Config. A Founder can. A custom “Finance” level might unlock Secrets without making that person a Founder.
Folder and file access is set on the folder or the file, not only here. See Files. Who opens a dashboard is set on that dashboard. See Dashboards.