Users & Access

User management, roles, permissions, approval workflows.

Written By Victor Raessen

Last updated 4 days ago

Users & Permissions

Control who can access Salesbuildr and what they can do. The permissions system lets you define roles with specific access levels, ensuring sales reps see what they need while managers and admins have broader control.

User types

Salesbuildr distinguishes between two types of users:

TypeDescription

MSP users (internal)

Your team members — sales reps, managers, admins. They create quotes, manage products, and run your Salesbuildr instance

Customer users (external)

Your customers' contacts. They access the portal to view quotes, approve proposals, and use self-service storefronts

Internal users are managed from the admin panel. External users are managed as contacts within their company records (see Companies and Contacts).

User management

Viewing users

Navigate to Admin > Users & Access > Users to see all users. The page has two tabs:

  • MSP Users — Your internal team. Shows name, email, role, invitation status, primary manager, and actions

  • Customer Users — External contacts with portal access. Shows name, email/company, and last login

Admin Users & Access page showing user list with Name, Username/Company, Role, and Manager columns

Inviting users

To invite a new internal user:

  1. Click Invite User

  2. Select a contact from your company's contact list

  3. Confirm or override the email address

  4. Assign initial roles (if the permissions feature is enabled)

  5. Send the invitation

The user receives an email with an activation link. Invitation statuses are tracked: active, invitation sent, pending setup, or no access.

User detail page

Click a user to view their detail page, which includes:

  • Identity provider — Sign-in method (Google, Microsoft, or password), activation status

  • Status — Active or inactive toggle

  • Roles — Assigned roles and permissions

  • Profile — Name, email, avatar, creation date, last login

  • Managers — Primary and secondary manager assignments (requires advanced approval feature)

  • Company — Company assignment and verification status

  • External IDs — PSA integration identifiers

Authentication

Users sign in using one of three methods:

  • Google SSO — Sign in with a Google account

  • Microsoft SSO — Sign in with a Microsoft account

  • Password — Email and password authentication

A single user can have multiple sign-in providers linked to their account.

Deactivating users

Admins can deactivate users by toggling their status to inactive. Deactivated users cannot sign in but their data (quotes, opportunities) is preserved. Users can be reactivated at any time.

Roles

Salesbuildr uses a role-based access control system. Every internal user has one or more roles that determine what they can do.

Default roles

RoleDescription

Admin

Full access to all features, settings, and user management. Admins bypass all permission checks

Base user

Default access level when no specific roles are assigned. Can sign in and use basic features

Admins can promote any user to Admin by navigating to their user detail page and toggling the admin switch.

Viewer license

The Viewer license is a built-in role that grants read-only access to products. Users with only the Viewer license are not counted against your user licenses.

Permissions

The permissions feature enables granular, role-based access control beyond the default Admin/User model.

Note: Permissions is a feature that must be enabled for your account. Without it, users are either Admin (full access) or base user.

Available permissions

Salesbuildr has 9 permissions that follow a resource-action pattern:

PermissionDescription

Quote editor

Create and manage quotes

Quote template editor

Create and manage quote templates

Product viewer

View products (read-only, Viewer license)

Product editor

Create and edit products

Products importer

Import products from distributors

Pricing book editor

Create and manage pricing books

Company editor

Edit company records

Whitespace viewer

Access the whitespace analysis module

Procurement editor

Manage procurement and purchase orders

Creating custom roles

Navigate to Admin > Users & Access > Permissions to create role-permission mappings:

  1. Click New role permissions mapping

  2. Enter a role name (e.g., "Sales Manager", "Product Specialist")

  3. Check the permissions this role should have

  4. Save

Each role can have any combination of the 9 permissions. Users can be assigned multiple roles — their effective permissions are the union of all assigned roles.

Assigning roles to users

  1. Navigate to Admin > Users & Access > Users

  2. Open a user's detail page

  3. Under Roles, check the roles you want to assign

  4. Save

User detail page with display name, email, manager assignments, admin toggle, and role checkboxes

Bulk role assignment

Select multiple MSP users from the user list and click Bulk Edit to assign roles (and managers) to all selected users at once.

Manager hierarchy

When the advanced approval workflow feature is enabled, you can assign primary and secondary managers to users. This supports the approval routing system where quotes can be automatically routed to a user's manager for approval.

Setup

  1. Enable the Advanced Approval Workflow feature for your account

  2. Navigate to a user's detail page

  3. Under Managers, select:

    • Primary manager — The user's direct manager

    • Secondary manager — A backup or additional manager

  4. Save

Managers can be bulk-assigned across multiple users.

How managers are used

  • Quote approvals — Advanced approval rules can route quotes to the quote owner's manager (see Quotes)

  • Reporting — Manager relationships help organize your team hierarchy

  • User list — The primary manager is shown as a column in the MSP users table

Restricting opportunity access

For organizations that want to limit visibility between sales reps, the Restrict opportunity access setting (under opportunity configuration) ensures non-admin users can only see opportunities and quotes they own.

When disabled (default), all users with the quote editor permission can see all opportunities and quotes.

Lines of business and teams

If your PSA supports lines of business or teams, they sync to Salesbuildr automatically:

  • Lines of business — Imported from ConnectWise or Autotask. Users and opportunities can be associated with a line of business

  • Opportunity teams — HaloPSA-specific. Managed at Admin > Opportunities > Opportunity Teams. Users and opportunities can be assigned to teams

These are used for filtering and organizing your pipeline by team or business unit.

See also