Permissions, in plain English
What permissions are, how they combine, and where to find every flag.
A permission is a single capability, for example, "can create tasks" or "can manage roles". Every page and every button in Nexus ERP is gated by one or more permissions.
When you sign in, the app figures out what you can do by adding up the permissions from every role you hold. If any of your roles grants a permission, you have it.
The five default roles
Every new organisation ships with five locked roles you can't edit or delete:
| Role | What it's for |
|---|---|
| Owner | Full control. Everything. Only owners can promote other owners. |
| Admin | Full operational access. Cannot delete the org or manage billing. |
| Manager | Can manage clients, projects, leads, and team members' work. |
| Member | Day-to-day workspace user, own tasks, files, chat, profile. |
| Developer | Limited to dev tools, API keys and the audit log. |
For most teams these five are enough. If you need finer control, see How roles work for creating custom roles.
All permission flags
The full list of capabilities, grouped by feature area. Tick the matching boxes when you author a custom role.
Tasks
| Flag | Label | Description |
|---|---|---|
| TASKS | Tasks | Access My Tasks tab, add submissions, use task chat and files. |
| CREATE_TASKS | Create Tasks | Create and assign tasks to other users, edit own tasks. |
| VIEW_ALL_TASKS | View All Tasks | View all org tasks (read-only unless also has Create Tasks). |
| MANAGE_TASKS | Manage Tasks | Edit and delete any task in the org. |
Files
| Flag | Label | Description |
|---|---|---|
| FILES | Files | Access Files tab, see files from own tasks, chats, and invoices. |
| VIEW_ALL_FILES | View All Files | See all files in the org. |
| MANAGE_FILES | Manage Files | Edit file metadata and delete files. |
Teams
| Flag | Label | Description |
|---|---|---|
| TEAMS | Teams | Access Teams tab, see own teams. Team leads can assign tasks. |
| TEAMS_VIEW_ALL | View All Teams | View all teams in the org. |
Chat
| Flag | Label | Description |
|---|---|---|
| CHAT_DELETE | Delete Chats | Delete any message in a team, project or task chat you can open. In direct messages people can only delete their own. |
| CHAT_VIEW_ALL | View All Chats | View every team, project and task chat, regardless of membership. Direct messages stay private. |
Users
| Flag | Label | Description |
|---|---|---|
| USERS | Users | Access Users tab, see teammates and their contact info. |
| USERS_VIEW_ALL | View All Users | View all org members and their info. |
CRM - Clients
| Flag | Label | Description |
|---|---|---|
| CLIENTS | Clients | Access Clients tab, view accessible clients. |
| CLIENTS_VIEW_ALL | View All Clients | View all org clients. |
| CLIENTS_MANAGE | Manage Clients | Edit accessible client records. |
| CLIENTS_CREATE | Create Clients | Create new clients (includes View All Clients). |
CRM - Projects
| Flag | Label | Description |
|---|---|---|
| PROJECTS | Projects | Access Projects tab, view own projects. |
| PROJECTS_VIEW_ALL | View All Projects | View all org projects. |
| PROJECTS_MANAGE | Manage Projects | Edit accessible project details. |
| PROJECTS_CREATE | Create Projects | Create new projects (includes View All Projects). |
| MANAGE_WORKFLOWS | Manage Workflows | Create, edit, archive, and trigger org-level workflow templates from any project. |
CRM - Invoices
| Flag | Label | Description |
|---|---|---|
| INVOICES | Invoices | Access Invoices tab, view accessible invoices. |
| INVOICES_VIEW_ALL | View All Invoices | View all org invoices. |
| INVOICES_MANAGE | Manage Invoices | Edit accessible invoices. |
| INVOICES_CREATE | Create Invoices | Create new invoices (includes View All Invoices). |
CRM - Payments
| Flag | Label | Description |
|---|---|---|
| PAYMENTS | Payments | Access Payments tab, view accessible payments. |
| PAYMENTS_VIEW_ALL | View All Payments | View all org payments. |
| PAYMENTS_MANAGE | Manage Payments | Edit accessible payment records. |
| PAYMENTS_CREATE | Create Payments | Record new payments (includes View All Payments). |
CRM - Quotes
| Flag | Label | Description |
|---|---|---|
| QUOTES | Quotes | Access Quotes tab, view accessible quotes. |
| QUOTES_VIEW_ALL | View All Quotes | View all org quotes. |
| QUOTES_MANAGE | Manage Quotes | Edit accessible quotes and change statuses. |
| QUOTES_CREATE | Create Quotes | Create new quotes (includes View All Quotes). |
Passwords
| Flag | Label | Description |
|---|---|---|
| VIEW_PROJECT_PASSWORDS | View project passwords | See the organisation passwords of the projects you can open. Never anyone's personal passwords. Needs a Projects permission to open the projects. |
| MANAGE_PROJECT_PASSWORDS | Manage project passwords | Add, edit, delete and share organisation passwords of the projects you can open, and move your own personal passwords there. Includes viewing them. Needs a Projects permission to open the projects. |
| VIEW_CLIENT_PASSWORDS | View client passwords | See the organisation passwords of the clients you can open, including those of their projects. Needs a Clients permission to open the clients. |
| MANAGE_CLIENT_PASSWORDS | Manage client passwords | Add, edit, delete and share organisation passwords of the clients you can open, and move your own personal passwords there. Includes viewing them. Needs a Clients permission to open the clients. |
| VIEW_ALL_CLIENT_PASSWORDS | View all client passwords | See every organisation password linked to a client, including those of its projects. |
| MANAGE_ALL_CLIENT_PASSWORDS | Manage all client passwords | Add, edit, delete and share any organisation password linked to a client, and move your own personal passwords there. Includes viewing them. |
| VIEW_ALL_ORG_PASSWORDS | View all organisation passwords | See every organisation password, including ones not linked to a client or project. Never anyone's personal passwords. |
| MANAGE_ALL_ORG_PASSWORDS | Manage all organisation passwords | Add, edit, delete and share any organisation password, including ones not linked to a client or project, and move your own personal passwords there. Includes viewing them. |
CRM - Expenses
| Flag | Label | Description |
|---|---|---|
| EXPENSES_VIEW_ALL | View Expenses | Access Expenses tab and view all expenses. |
| EXPENSES_CREATE | Create Expenses | Add new expense records. |
| EXPENSES_MANAGE | Manage Expenses | Edit and delete any expense. |
CRM - Leads
| Flag | Label | Description |
|---|---|---|
| LEADS | Leads | Access Leads tab, see own assigned leads and calling queue. |
| LEADS_VIEW_ALL | View All Leads | View all leads in the org. |
| LEADS_CREATE | Create Leads | Create new leads and manage own created leads. |
| LEADS_MANAGE | Manage Leads | Manage and delete any accessible lead. |
Contacts
| Flag | Label | Description |
|---|---|---|
| CONTACTS_VIEW_ALL | View All Contacts | See every contact regardless of whether they are a lead, an applicant, a client contact, or a WhatsApp correspondent. |
| CONTACTS_VIEW_LEADS | View Lead Contacts | See contacts who are sales leads, and their lead pipeline, calls and notes. Other facets of the same person stay hidden. |
| CONTACTS_VIEW_HR | View Applicant Contacts | See contacts who have applied for a job, and their applications and HR notes. Other facets of the same person stay hidden. |
| CONTACTS_VIEW_CLIENTS | View Client Contacts | See contacts linked to a client, and their client roles and notes. Other facets of the same person stay hidden. |
| CONTACTS_MANAGE | Manage Contacts | Edit contact names, phones and emails, manage tags, edit and delete anyone's notes at any time, merge duplicates, and delete contacts. Deleting a contact also requires being able to see every facet it has. |
Finance
| Flag | Label | Description |
|---|---|---|
| FINANCE_OVERVIEW | Finance Overview | Access the Finance Overview page with aggregated business metrics. |
| ACCOUNTS_VIEW | View Accounts | View company bank accounts and balances. |
| ACCOUNTS_MODIFY | Modify Accounts | Create, edit, and delete bank accounts. |
Dashboard
| Flag | Label | Description |
|---|---|---|
| MANAGE_MEMBERS | Manage Members | Add, remove, and update org members. |
| MANAGE_ROLES | Manage Roles | Create and edit roles below your own. |
| MANAGE_TEAMS | Manage Teams | Create, edit, and delete teams. |
| VIEW_AUDIT_LOG | View Audit Log | View the full organisation audit trail. |
| DEVELOPER | Developer Access | Access developer tools and manage API keys. |
| MANAGE_ORG | Manage Organisation | Edit org name, slug, logo, and branding, and the document header: the legal identity (CIN, PAN, registered address) and header image printed on invoices, quotes and receipts. |
| VIEW_DASHBOARD | View Dashboard | Access the admin dashboard. |
Marketing
| Flag | Label | Description |
|---|---|---|
| VIEW_SHORT_URLS | View Short URLs | Access Marketing tab, view all short URLs and analytics. |
| CREATE_SHORT_URLS | Create Short URLs | Create new short URL redirects. |
| MANAGE_SHORT_URLS | Manage Short URLs | Edit existing short URL details and OG metadata. |
| DELETE_SHORT_URLS | Delete Short URLs | Delete short URLs and all associated visit data. |
Meetings
| Flag | Label | Description |
|---|---|---|
| MEETINGS | Meetings | Access Meetings tab and view Google Calendar meetings. |
| MEETINGS_CREATE | Schedule Meetings | Create Google Meet meetings and invite org members. |
CRM - Client Portal
| Flag | Label | Description |
|---|---|---|
| CLIENTS_PORTAL_MANAGE | Manage Client Portal | Create and disable client login accounts, configure which portal tabs each client sees. |
Billing
| Flag | Label | Description |
|---|---|---|
| MANAGE_BILLING | Manage Billing | View the workspace subscription, invoices, payment method, and change tiers, seats, or storage add-ons. |
Inventory
| Flag | Label | Description |
|---|---|---|
| INVENTORY | Inventory | Access the Inventory and Locations tabs and view stock levels + movement history. |
| INVENTORY_MANAGE_ITEMS | Manage Items | Create, update, and archive inventory items and their custom-field values. |
| INVENTORY_MANAGE_LOCATIONS | Manage Locations | Create, update, and archive inventory locations. |
| INVENTORY_MANAGE_FIELDS | Manage Fields | Create, edit, reorder, and delete custom fields on inventory items. |
| INVENTORY_RECORD_MOVEMENT | Record Movements | Record IN / OUT / ADJUSTMENT / TRANSFER stock movements. |
Hiring
| Flag | Label | Description |
|---|---|---|
| MANAGE_JOB_POSTS | Manage Job Posts | Create, edit, open, and close job posts, and build their application forms. |
| VIEW_JOB_APPLICATIONS | View Applications | View submitted job applications, their answers, and uploaded files. |
| MANAGE_JOB_APPLICATIONS | Manage Applications | Change application status, assign a reviewer, edit notes, and delete applications. |
Partner
| Flag | Label | Description |
|---|---|---|
| VIEW_PARTNER | View Partner Dashboard | See the partner Overview: managed-org usage, billing run-rate, and the credit-line ledger. Read-only. |
| MANAGE_PARTNER | Manage Partner Organisations | Create and edit the organisations this partner manages, change their tier, and add or remove their members. Includes View Partner Dashboard. |
Platform
| Flag | Label | Description |
|---|---|---|
| PLATFORM_ADMIN | Platform Admin | Cross-org superadmin: list and delete organisations, override tiers, toggle feature flags, manage partner credit lines, broadcast email, and configure the bots. |
WhatsApp Chat
| Flag | Label | Description |
|---|---|---|
| WHATSAPP_CHAT_VIEW | View WhatsApp Chats | See the WhatsApp section on the Chat page and read conversations with external contacts (including HR step-link threads). |
| WHATSAPP_CHAT_SEND | Send WhatsApp Chats | Reply to WhatsApp messages, start chats and close or reopen threads. Outside the 24-hour window the default template is used; picking any other template needs Send WhatsApp chat templates. |
| LISTEN_CALL_RECORDINGS | Listen to call recordings | Play recordings of WhatsApp calls and read their transcripts. |
| WHATSAPP_CHAT_TEMPLATES_MANAGE | Manage WhatsApp chat templates | Create, edit, archive and delete the templates members send in WhatsApp chats, and customise the default message and call request. |
| WHATSAPP_CHAT_TEMPLATES_USE | Send WhatsApp chat templates | Pick the workspace's own templates (beyond the default message and call request) to message a contact who last wrote more than 24 hours ago, to start a new chat, and to ask permission to call outside that window. |
Nova
| Flag | Label | Description |
|---|---|---|
| USE_NOVA | Use Nova | Chat with Nova, the AI assistant on the Chat page, to find, summarise, create, update and delete tasks. Nova only does what this role can already do with tasks, and every change waits for the member's approval. |
One important rule
You cannot grant a permission you don't have yourself. If a checkbox is greyed out when you're authoring a role, that's why, your effective permissions don't include it. Ask an Owner or Admin to do it for you.