Help center
Security & compliance
Adding staff and roles
Invite teammates to your workspace with a role that fits their job — from full admin to read-only viewer — and remove access in one tap when it should end.
The short answer
Invite each teammate with their own account and assign the least-permissive role that lets them do their job. Use Viewer for read-only access, remove access when it is no longer needed, and avoid shared logins so activity remains attributable.
Invite a teammate
Team management lives under Settings → Staff team, in the landlord workspace. You invite a teammate by email, pick their role, and they receive an invitation to set up their own login — no shared passwords. Pending invitations are listed with their expiry date until they are accepted, and you can revoke one before it is used.
Because each teammate has their own account, everything they do is attributed to them in your records. That matters more as more hands touch the portfolio: the audit trail shows who acted, not just that someone did.
What each role can do
Roles are scoped to the job, and the boundaries are enforced on the server for every gated action — not just hidden buttons. Admin has full access, equivalent to you. Manager covers the day-to-day portfolio areas, including property records, but not billing, staff management, or the agent's policy settings, which stay owner-level. Leasing is limited to leasing and tenant-facing areas, with no access to money tasks.
Maintenance is limited to maintenance areas only. Accountant covers financial areas but not leasing or tenant-facing areas. Viewer is read-only everywhere — the right role for a CPA or anyone who should look but never change anything. Many of the areas these roles cover, such as rent collection, leases, tenant messaging, and maintenance requests, are planned; a role grants access to an area once it is available. If a teammate tries something outside their role, the action is refused with a clear message rather than failing silently.
Removing access
Access ends when you say so. From the same Staff team screen you can remove a member — they lose access immediately — or revoke a pending invitation before it is accepted. The workspace owner always retains full access and can never be locked out by a role change.
It is good practice to match access to the season: grant your accountant Viewer access before tax time and remove it once the return is filed, and remove a departed staffer the day they leave. Grants and removals are part of your workspace record, so who could act, and when, stays reconstructable.
Frequently asked questions
Related articles