Permissions, in plain English

What permissions are, how they combine, and where to find every flag.

A permission is a single capability, for example, "can create tasks" or "can manage roles". Every page and every button in Nexus ERP is gated by one or more permissions.

When you sign in, the app figures out what you can do by adding up the permissions from every role you hold. If any of your roles grants a permission, you have it.

The five default roles

Every new organisation ships with five locked roles you can't edit or delete:

Role	What it's for
Owner	Full control. Everything. Only owners can promote other owners.
Admin	Full operational access. Cannot delete the org or manage billing.
Manager	Can manage clients, projects, leads, and team members' work.
Member	Day-to-day workspace user, own tasks, files, chat, profile.
Developer	Limited to dev tools, API keys and the audit log.

For most teams these five are enough. If you need finer control, see How roles work for creating custom roles.

All permission flags

The full list of capabilities, grouped by feature area. Tick the matching boxes when you author a custom role.

Tasks

Flag	Label	Description
TASKS	Tasks	Access My Tasks tab, add submissions, use task chat and files.
CREATE_TASKS	Create Tasks	Create and assign tasks to other users, edit own tasks.
VIEW_ALL_TASKS	View All Tasks	View all org tasks (read-only unless also has Create Tasks).
MANAGE_TASKS	Manage Tasks	Edit and delete any task in the org.

Files

Flag	Label	Description
FILES	Files	Access Files tab, see files from own tasks, chats, and invoices.
VIEW_ALL_FILES	View All Files	See all files in the org.
MANAGE_FILES	Manage Files	Edit file metadata and delete files.

Teams

Flag	Label	Description
TEAMS	Teams	Access Teams tab, see own teams. Team leads can assign tasks.
TEAMS_VIEW_ALL	View All Teams	View all teams in the org.

Chat

Flag	Label	Description
CHAT_DELETE	Delete Chats	Delete any accessible chat message.
CHAT_VIEW_ALL	View All Chats	View all chats regardless of team membership.

Users

Flag	Label	Description
USERS	Users	Access Users tab, see teammates and their contact info.
USERS_VIEW_ALL	View All Users	View all org members and their info.

CRM - Clients

Flag	Label	Description
CLIENTS	Clients	Access Clients tab, view accessible clients.
CLIENTS_VIEW_ALL	View All Clients	View all org clients.
CLIENTS_MANAGE	Manage Clients	Edit accessible client records.
CLIENTS_CREATE	Create Clients	Create new clients (includes View All Clients).

CRM - Projects

Flag	Label	Description
PROJECTS	Projects	Access Projects tab, view own projects.
PROJECTS_VIEW_ALL	View All Projects	View all org projects.
PROJECTS_MANAGE	Manage Projects	Edit accessible project details.
PROJECTS_CREATE	Create Projects	Create new projects (includes View All Projects).
MANAGE_WORKFLOWS	Manage Workflows	Create, edit, archive, and trigger org-level workflow templates from any project.

CRM - Invoices

Flag	Label	Description
INVOICES	Invoices	Access Invoices tab, view accessible invoices.
INVOICES_VIEW_ALL	View All Invoices	View all org invoices.
INVOICES_MANAGE	Manage Invoices	Edit accessible invoices.
INVOICES_CREATE	Create Invoices	Create new invoices (includes View All Invoices).

CRM - Payments

Flag	Label	Description
PAYMENTS	Payments	Access Payments tab, view accessible payments.
PAYMENTS_VIEW_ALL	View All Payments	View all org payments.
PAYMENTS_MANAGE	Manage Payments	Edit accessible payment records.
PAYMENTS_CREATE	Create Payments	Record new payments (includes View All Payments).

CRM - Quotes

Flag	Label	Description
QUOTES	Quotes	Access Quotes tab, view accessible quotes.
QUOTES_VIEW_ALL	View All Quotes	View all org quotes.
QUOTES_MANAGE	Manage Quotes	Edit accessible quotes and change statuses.
QUOTES_CREATE	Create Quotes	Create new quotes (includes View All Quotes).

CRM - Client Passwords

Flag	Label	Description
CLIENTS_PASSWORDS	Client Passwords	See the Passwords tab on client pages. Requires per-password access to view individual entries.
CLIENTS_PASSWORDS_MANAGE	Manage Client Passwords	Create, edit, delete client passwords and manage access. Sees all passwords without per-password grants.

CRM - Expenses

Flag	Label	Description
EXPENSES_VIEW_ALL	View Expenses	Access Expenses tab and view all expenses.
EXPENSES_CREATE	Create Expenses	Add new expense records.
EXPENSES_MANAGE	Manage Expenses	Edit and delete any expense.

CRM - Leads

Flag	Label	Description
LEADS	Leads	Access Leads tab, see own assigned leads and calling queue.
LEADS_VIEW_ALL	View All Leads	View all leads in the org.
LEADS_CREATE	Create Leads	Create new leads and manage own created leads.
LEADS_MANAGE	Manage Leads	Manage and delete any accessible lead.
VIEW_CONTACTS	View Contacts	View the Contacts tab under Leads and see shared contact records with their client links.
MANAGE_CONTACTS	Manage Contacts	Edit contact details (name, phones, emails) and delete contacts. Implies View Contacts.

Finance

Flag	Label	Description
FINANCE_OVERVIEW	Finance Overview	Access the Finance Overview page with aggregated business metrics.
ACCOUNTS_VIEW	View Accounts	View company bank accounts and balances.
ACCOUNTS_MODIFY	Modify Accounts	Create, edit, and delete bank accounts.

Dashboard

Flag	Label	Description
MANAGE_MEMBERS	Manage Members	Add, remove, and update org members.
MANAGE_ROLES	Manage Roles	Create and edit roles below your own.
MANAGE_TEAMS	Manage Teams	Create, edit, and delete teams.
VIEW_AUDIT_LOG	View Audit Log	View the full organisation audit trail.
DEVELOPER	Developer Access	Access developer tools and manage API keys.
MANAGE_ORG	Manage Organisation	Edit org name, slug, logo, and branding.
VIEW_DASHBOARD	View Dashboard	Access the admin dashboard.

Rewards

Flag	Label	Description
REWARDS_VIEW	View Own Rewards	View your own rewards balance and earned history.
REWARDS_MANAGE	Manage Rewards	View all members' rewards and add redemption records.

Marketing

Flag	Label	Description
VIEW_SHORT_URLS	View Short URLs	Access Marketing tab, view all short URLs and analytics.
CREATE_SHORT_URLS	Create Short URLs	Create new short URL redirects.
MANAGE_SHORT_URLS	Manage Short URLs	Edit existing short URL details and OG metadata.
DELETE_SHORT_URLS	Delete Short URLs	Delete short URLs and all associated visit data.

Meetings

Flag	Label	Description
MEETINGS	Meetings	Access Meetings tab and view Google Calendar meetings.
MEETINGS_CREATE	Schedule Meetings	Create Google Meet meetings and invite org members.

CRM - Client Portal

Flag	Label	Description
CLIENTS_PORTAL_MANAGE	Manage Client Portal	Create and disable client login accounts, configure which portal tabs each client sees.

Billing

Flag	Label	Description
MANAGE_BILLING	Manage Billing	View the workspace subscription, invoices, payment method, and change tiers, seats, or storage add-ons.

One important rule

You cannot grant a permission you don't have yourself. If a checkbox is greyed out when you're authoring a role, that's why, your effective permissions don't include it. Ask an Owner or Admin to do it for you.