Productivity · Users & Roles
The right access.
For the right work.
Manage who can sign in, invitations, roles, and access reviews, with permissions that decide which records and actions each person can use. Roles and access rules apply across every module.
Roles and access
- Members
- 5
- Currently active
- Pending invitations
- 1
- Awaiting acceptance
- Seats used
- 6 / 10
- 4 remaining
- Administrators
- 1
- Super Admins with full access
- Alex Morgan
- Jordan Ellis
- Mariam Khan
- Omar Reed
- Priya Shah
- Maya LewisPending
Every role can open the page. Administrators manage members.
Developer also gets API keys, MCP and App Builder.
A workspace membership view
Invite and manage the people who need access to your business workspace.
Roles with clear responsibilities
Assign the role and permission configuration appropriate to the work.
Record level rules
Combine role permissions with supported attribute based access rules for business records.
One person, three moves.
Access is part of the workflow.
-
Invite the person
Connect the workspace account to the person who needs access.
-
Set the responsibilities
Choose the role and relevant permission policy.
-
Review access as work changes
Maintain memberships and permissions as responsibilities evolve.
Every role, every module, one grid.
Read across for what one role can do. Read down for who can do one thing.
Sign in
- Okta
- Microsoft Entra ID
- Google Workspace
- OpenID Connect
- SAML
Accounts
- Full users
- Billed seats
- Employee accounts
- Free for attendance and payslips
-
Roles that match your team
Build roles for owner, bookkeeper, dispatcher and technician, each with exactly the access they need.
-
Record and field rules
Limit who sees which records, and which fields on them, with access rules.
-
Single sign on
On Scale, sign in with Okta, Microsoft Entra ID, Google Workspace or any OpenID Connect or SAML provider.
-
Free employee accounts
On paid plans, employee accounts for attendance and payroll cost nothing extra.
Controls around the grid.
The controls that sit around access, and the plan each one comes with.
-
Roles and permissions
Decide who can see, create and change users & roles, down to records and fields, with custom roles.
-
Agaro Agent
Ask about your users & roles in plain language. The Agent asks before it changes a record, and it works within your permissions.
-
Your own custom modules
When users & roles needs a neighbour Agaro does not ship, build a module with your own fields, workflows and records in Studio.
-
App Builder
Build a website, document, slides or internal app next to your users & roles, described in plain words.
-
Open API and MCP
Connect your own systems, or let Claude and other AI clients work inside Agaro with the same permissions.
Free covers one CRM user. Studio custom modules, AI agents, API and MCP, single sign on and multi company are on Scale and up. See plans and pricing. Agaro ERP is in Preview / Pilot, so you shape it directly with the product team.
Read more: What is an AI native ERP? A plain explanation for small businesses, How an AI assistant works inside your ERP, within your permissions
Where the rules apply.
Users & Roles supplies the access boundaries used by the same employee, finance, CRM and operational records.
- Human Resources
Employees
Directory, org chart, departments, performance, timesheets, recognition, equipment, onboarding, learning, benefits and separation. Add custom employee fields in Studio and keep the working relationship around one employee record.
- Productivity
Companies
Organize the companies and workspaces you can access, and review permitted portfolio information without losing each workspace’s boundaries.
- Productivity
Activity Log
Review recorded business activity and notifications in one place. Keep a trace of the actions performed across your workspace.