Skip to content

Set Up Role Permissions

Permission profiles in HARi CRM give you fine-grained control over what each team member can see and do. You define profiles once, then assign them to users. When you update a profile, the changes apply to all users with that profile immediately.

For each entity, a permission profile controls four actions:

  • Create — Can the user create new records?
  • Read — Can the user view records?
  • Update — Can the user edit existing records?
  • Delete — Can the user delete records?

Additionally, you control the record scope — which records the user can access:

  • All — The user can see every record in the entity
  • Own — The user can only see records assigned to them
  • Team — The user can see records assigned to anyone in their team
  1. Go to Settings > Permission Profiles
  2. Click New Profile
  3. Enter a descriptive name (e.g. “Sales Representative”, “Support Agent”, “Executive”)
  4. For each entity, configure the permissions:
EntityCreateReadUpdateDeleteScope
ContactsYesYesYesNoTeam
CompaniesYesYesYesNoAll
OpportunitiesYesYesYesNoOwn
ActivitiesYesYesYesYesOwn
InvoicesNoYesNoNoOwn
TasksYesYesYesYesOwn
  1. Click Save
  • Same entity access as Sales Representative
  • Record scope set to All for Opportunities and Activities
  • Read access to all entities for reporting
  • Full access (CRUD) to Invoices
  • Read-only access to Companies and Contacts
  • No access to Opportunities or Leads
  • Full access to Contacts and Leads
  • Read-only access to Companies
  • No access to Invoices or Opportunities
  • Read access to all entities
  • No create, update, or delete permissions
  • Scope set to All
  1. Go to Settings > Users
  2. Select a user
  3. In the Permission Profile field, select the profile
  4. Save

After configuring a profile, verify it works as expected:

  1. Log in as a user with that profile (or ask them to test)
  2. Check that they can access the correct entities in the sidebar
  3. Verify that they can only perform the allowed actions
  4. Confirm the record scope works (they see only their own records, or all records, depending on the setting)

When you modify a permission profile, changes take effect immediately for all users assigned to that profile. No need to re-assign users.