Roles and permissions - the right access for everyone on the team
Give each employee a role, add or remove a single permission when needed, choose which menu areas they see and which WhatsApp numbers they answer. Every change is written to the activity log.
What the roles and permissions module is
Lynxbe's roles and permissions module decides what each person on the team can see and do. Every user gets a role, and every role comes with a ready set of permissions. On top of the role you can add or remove a single permission for one user, choose which menu areas they see, and decide which WhatsApp accounts they reach. The server checks the permission on every sensitive action, not just by hiding a button on the screen, and every permission change is logged with who changed what.
What the permissions module actually does
A ready role for every employee
Owner, admin, manager, employee and viewer, plus roles for specific areas such as accountant, HR manager, cashier and waiter. Each role comes with its own set of permissions.
A personal permission on top of the role
A manager with permission to manage can give one user an extra permission or remove one, without changing the role for everyone else.
View and manage, separately
Every area has a view permission and a manage permission, so an employee can see a report without being able to change it.
Menu areas per user
The menu visibility tab shows how many items and areas are open to a user, and turns each area on or off, or all of them in one click.
Access per WhatsApp number
Choose which users reach each of the business's WhatsApp accounts, so every team sees the conversations of its own number.
Every change is logged
An update to a user's permissions is written to the business's activity log with who made it and which permissions changed.
The API follows permissions too
An API key gets only the permissions you chose for it, and an action on behalf of a signed-in user also checks that user's own permission. A key without the right permission gets a clear refusal.
POST /api/v1/apps/{app}/messages/email
Authorization: Bearer <api-key>
HTTP 403
{
"success": false,
"error": "Insufficient scope. Required: send:email",
"required_scope": "send:email",
"your_scopes": ["..."]
}A key with set permissions
Every API key gets a list of permissions. A request that needs a permission the key does not have is refused with an answer that names exactly which permission is missing.
The user needs permission too
An action an app performs for a signed-in employee also checks the employee's permission, for example the inbox reply permission before sending an email.
Checked on the server, not just the screen
Every sensitive action is checked on the server against the user's permissions, so going around the screen does not grant access the user does not have.
Blocked attempts are logged
An API request blocked for a missing permission is written to the key's call log, with the permission it needed.
How businesses use roles and permissions
A new employee gets only what they need
Give them the employee role, and they see their own customers and conversations without access to money or settings.
An accountant with access to finance only
The accountant role opens bookkeeping and invoices without opening the rest of the platform.
A team for each WhatsApp number
The sales team answers the sales number, and the service team answers the service number.
A manager who sees but does not change
Give view permission on reports without manage permission, so they can follow along without changing data.
A check after a change
The activity log shows who changed whose permissions and when.
Manage permissions from any device
Change a role or a permission from a computer or a phone, and the change applies to the user on all their devices.
One permission, on every device
What an employee may see and do is the same in the app, the browser and the desktop, because the server is what checks the permission.
See the Platform in Action
Experience a powerful interface designed for productivity on any screen
One Platform. Everything Connected.
Every module works together seamlessly. Your data flows automatically between CRM, Booking, Payments, Communications, and more.
No More Switching Apps
Everything you need in one place. No juggling between 10 different tools.
Automatic Data Sync
Customer data, bookings, payments, and communications sync automatically.
Smart Automation
Create workflows that span multiple modules. Book → Invoice → Remind → Follow-up.
Unified Analytics
See your entire business performance in one dashboard with cross-module insights.
See How Modules Work Together
Click any connection to see how two modules combine to create powerful automations
WhatsApp + CRM
See full customer history when they message. Auto-tag contacts, track conversations, and personalize responses based on purchase history.
Booking + Invoicing
Auto-generate invoices when appointments complete. Send payment reminders, track revenue by service, and reconcile automatically.
Payments + Booking
Collect deposits at booking time. Deposits and reminders can reduce no-shows. Process full payments, offer installments, and manage refunds.
AI + WhatsApp
24/7 intelligent responses. Answer FAQs, book appointments, send quotes - all automatically while you sleep.
Contracts + Payments
Auto-trigger payment collection when contract is signed. No chasing clients - funds transfer on signature.
Automation Flows
Build powerful workflows: New lead → WhatsApp welcome → Book demo → Send contract → Collect payment → Add to CRM.
Real Example: The Perfect Customer Journey
Zero manual work. Every step automated.
Power Combinations
See how 3 and 4 modules create complete business workflows
Smart Booking Experience
Booking + WhatsApp + CRM
Customer books online → WhatsApp confirmation with their name from CRM → Personalized reminder with past service history → Post-visit follow-up based on preferences
Automated Billing Cycle
Invoicing + Payments + Email
Invoice generated → Payment link embedded → Email sent → Reminder at 7 days → Thank you email on payment → Receipt auto-delivered
24/7 Smart Scheduler
AI + WhatsApp + Booking
Customer messages at 2am → AI understands intent → Shows available slots → Books appointment → Confirms instantly → No human needed
Smart Call Center
Voice + CRM + Analytics
Call comes in → Customer card pops up with full history → Agent sees previous purchases & preferences → Call logged automatically → Analytics tracks call duration, outcomes & agent performance
Multi-Channel Reminders
SMS + WhatsApp + Booking
Customer books appointment → WhatsApp confirmation sent → SMS reminder 24h before → WhatsApp reminder 1h before → No-show? Auto-reschedule message sent on both channels
Omnichannel AI Support
Voice + WhatsApp + AI
Customer calls → AI voice assistant answers → Can't resolve? Transfers to WhatsApp for detailed help → AI continues conversation seamlessly → Full transcript saved
Complete Service Business
CRM + Booking + Invoicing + Payments
New customer added to CRM → Books service → Appointment completed → Invoice auto-generated with customer details → Payment collected → History updated in CRM
Intelligent Customer Engagement
CRM + AI + WhatsApp + Analytics
AI identifies high-value customers in CRM → Sends personalized WhatsApp offers → Tracks engagement → Analytics shows ROI → AI optimizes next campaign
Deal Closing Machine
CRM + Contracts + Payments + Email
Lead marked 'ready' in CRM → Contract auto-generated with details → Sent for e-signature → Payment triggered on sign → Welcome email sent → Deal closed
Roles and permissions FAQ
Which roles does the platform have
Can I give one employee a permission the rest of the role does not have
What is the difference between view and manage
Can I hide menu areas from a user
Who sees which WhatsApp number
Are permission changes kept in a log
We'll show you how to give a role, add a single permission and choose each employee's menu.
Get the Lynxbe app
