Permissions are scoped per account. A new account is seeded with Main Admin (every permission), Sales Manager, Sales Rep and Customer Support (contacts and phone-call-report permissions, plus support/ticket permissions for Customer Support). Menu items, buttons and actions are gated on these permissions, for example billing, view_settings, onboarding, view_employees, view_task and view_role. Shifts and Business Branding editing are restricted to Main Admin and super admin regardless of permissions.