Roles and permissions
The three system roles
- Superadmin: everything, including members, roles and permissions.
- Admin: day-to-day work, including adding data and managing tiles.
- Viewer: read-only. A viewer can never write, whatever else is granted.
The owner
The person who created the organization is its owner, marked Owner in the member list. Like the creator of a group chat, the owner is a superadmin like the others but ranks above them: no one in the organization can demote, deactivate or remove the owner, and the owner can't leave it.
- To make someone else the owner (for example when the owner leaves the company), contact support from the organization or your Account Center. The new owner must already be a member; if they are not a superadmin yet, they become one. Both people are told by email.
- If the owner deletes their Tilelytix account, ownership passes to the next in line: the superadmin who joined earliest (or, if there is none, the earliest admin, who becomes a superadmin).
When support pauses the owner
An organization always has exactly one owner. If Tilelytix support deactivates the owner (at the organization's request), the next in line becomes the acting owner for the time being: the earliest-joined other superadmin, or else the earliest admin, then other roles. If they were not a superadmin, they become one while they stand in. When the owner is reactivated, ownership goes back to them automatically and the stand-in returns to their previous role. If the owner is removed for good, the acting owner becomes the owner permanently.
A plan stays with the person who bought it while the owner is only paused. When ownership changes for good, a plan the old owner paid for that covers only this organization moves to the new owner, with every paid day kept (auto-renew is switched off, because it charged the old owner's card; the new owner can switch it on again). A plan that also covers other organizations stays with its buyer.
How many superadmins
Your plan may limit how many people in an organization can be superadmins at the same time (the plan card says so). When the limit is reached, make new people Admins; an invitation to join as a superadmin that arrives after the limit is reached makes the person an Admin. Nobody already a superadmin loses the role.
Changing someone's role
On the Superadmin page, User Management has a role picker next to each member (not for the owner or yourself). It lists the system roles and your custom roles. Only a superadmin can make someone a superadmin, even if an admin has been given the permission to change roles.
Fine-grained control
On plans with custom roles and per-member permissions, superadmins can change what a role can do inside their own organization, and can override specific permissions for one member. Custom roles can be created with exactly the permissions you choose. Overrides are always scoped to your organization and never change what the roles mean elsewhere.
- Override for this org (Admin or Viewer in Custom Roles): each permission shows its built-in setting and can be set to Default, Allow or Deny. Default puts it back to the built-in setting.
- Edit on a custom role: switch on what people with that role may do.
- Permissions on a member: Inherit (what their role gives them, shown next to it), Allow or Deny for that person only.
- Viewers stay read-only: permissions that change data can't be given to a viewer. Change their role instead.
- A custom role can be deleted once nobody has it. Its invite links stop working.
Permissions you will see
- Members and roles: invite, edit and remove people.
- Tiles: view, install and configure, edit tile settings and credentials, and buy tiles.
- Finance: read and write transactions, recurring costs and investors.
- Notes: read and write notes and tasks.