> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sequencehq.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles & Permissions

> Manage user access and permissions with finance-centric role-based access controls

![User roles and permissions](https://mintcdn.com/sequence/3BbasIOYWRsD_3Fw/images/illustration/users_cover.png?fit=max\&auto=format\&n=3BbasIOYWRsD_3Fw\&q=85\&s=0cd4c40227f3f6d3f5f80b6f633e7d08)

Control user access to Sequence with role-based permissions designed for finance teams. Roles & permissions prevent accidental changes, support audit trails, and enable workflows across your teams.

![Roles and permissions overview](https://mintcdn.com/sequence/eEwrXSYRHZ_aHxib/images/product/settings/user_roles.png?fit=max\&auto=format\&n=eEwrXSYRHZ_aHxib\&q=85\&s=595be34e8f5e3fa938d1a41c04be6095)

## Understanding roles & permissions

Sequence uses role-based access control (RBAC) to manage what users can see and do within your workspace. Each user can be assigned one or more roles, with permissions designed around common finance team structures.

> [accordion] Key concepts
>
> | | |
> | - | - |
> | **Workspace** | Your Sequence account where roles are managed |
> | **Role** | A collection of permissions that defines what a user can do |
> | **Permission** | Specific access rights to resources and actions |
> | **Resource** | Objects like customers, invoices, or billing schedules |
> | **Action** | Operations like create, read, update, delete, or feature-specific actions |
> | **Least privilege** | Users start with minimal access and are granted additional permissions as needed |

### Default user roles

Sequence provides four default roles that mirror common finance team structures. Users can be assigned multiple roles to customize their access level.

> [card] Admin
>
> Full access to all resources and actions, including user management and system settings.

> [card] Finance User
>
> Complete access to billing operations with limited administrative capabilities.

> [card] Sales User
>
> Quote management and customer interaction focused permissions.

> [card] View-only
>
> Read-only access across all resources for reporting and analysis.

## Permission matrix

The following table shows the specific permissions for each default role across Sequence resources:

| Resource or Action | Admin | Finance User | Sales User | View-only |
| - | - | - | - | - |
| **Customers** | ✅ Full access | ✅ Full access | ✅ Full access | 👁️ View-only |
| **Billing Schedules** | ✅ Full access | ✅ Full access | 👁️ View-only | 👁️ View-only |
| **Start a schedule** | ✅ | ✅ | ❌ | ❌ |
| **Products & Pricing** | ✅ Full access | ✅ Full access | 👁️ View-only | 👁️ View-only |
| **Quotes** | ✅ Full access | 👁️ View-only | ✅ Full access | 👁️ View-only |
| **Publish quote** | ✅ | ❌ | ✅ | ❌ |
| **Accept quote** | ✅ | ❌ | ✅ | ❌ |
| **Execute quote** | ✅ | ✅ | ✅ | ❌ |
| **Invoices** | ✅ Full access | ✅ Full access | 👁️ View-only | 👁️ View-only |
| **Finalize & send invoice** | ✅ | ✅ | ❌ | ❌ |
| **Credit Notes** | ✅ Full access | ✅ Full access | 👁️ View-only | 👁️ View-only |
| **Usage & Events** | ✅ Full access | 👁️ View-only | 👁️ View-only | 👁️ View-only |
| **Revenue Recognition** | ✅ Full access | ✅ Full access | 👁️ View-only | 👁️ View-only |
| **Settings** | ✅ Full access | 👁️ View-only | 👁️ View-only | 👁️ View-only |
| **Invite users** | ✅ | ✅ | ✅ | ❌ |
| **Edit users** | ✅ | ❌ | ❌ | ❌ |
| **Connectors** | ✅ Full access | 👁️ View-only | 👁️ View-only | 👁️ View-only |
| **Discounts** | ✅ Full access | ✅ Full access | 👁️ View-only | 👁️ View-only |
| **Credit Grants** | ✅ Full access | ✅ Full access | 👁️ View-only | 👁️ View-only |
| **Tax Management** | ✅ Full access | ✅ Full access | 👁️ View-only | 👁️ View-only |

> [!NOTE]
>
> **Legend**: ✅ = Full CRUD access, 👁️ = View-only access, ❌ = No access

## Managing user roles

### Inviting new users

When inviting new users to your workspace, they are assigned the **View-only** role by default following the principle of least privilege. You can upgrade their permissions after they join.

**1. Navigate to Settings**

Go to Settings > Users in your Sequence dashboard

**2. Send invitation**

Click "Invite User" and enter their email address

**3. Assign role**

Select the appropriate role(s) for the new user

**4. Send invite**

The user will receive an email invitation to join your workspace

### Updating user permissions

![Edit user roles](https://mintcdn.com/sequence/eEwrXSYRHZ_aHxib/images/product/settings/editing_roles.png?fit=max\&auto=format\&n=eEwrXSYRHZ_aHxib\&q=85\&s=e3321170b6999e1acbb1bd058082adac)

Existing users can be assigned multiple roles to customize their access level. Admin users can modify role assignments at any time.

## Security & compliance

### Audit trails

All user permission change actions are logged with role information for compliance and security auditing.

## Best practices

> [accordion] Role assignment strategy
>
> * Start with the most restrictive role appropriate for each user's job function
> * Assign multiple roles only when necessary for cross-functional responsibilities
> * Regularly review and audit user permissions
> * Use View-only role for external stakeholders and reporting needs

> [accordion] Finance team organization
>
> * **Finance Users**: Day-to-day billing operations, invoice management, revenue recognition
> * **Sales Users**: Quote creation and management, customer relationship activities
> * **Admin**: System configuration, user management, connector setup
> * **View-only**: Executives, analysts, and external auditors

> [accordion] Security considerations
>
> * Maintain at least two admin users for redundancy
> * Remove access immediately when team members leave
> * Use View-only role for temporary or external access

## Frequently asked questions

> [accordion] Can a user have multiple roles?
>
> Yes, users can be assigned multiple roles. Their effective permissions will be the union of all assigned roles.

> [accordion] Can I create custom roles?
>
> Custom roles are not available in the initial release. The system is designed to support additional granular permissions in future updates.

> [accordion] How do I ensure workspace access isn't lost?
>
> Always maintain at least one active admin user. The system will prevent removing admin permissions from the last admin user.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.