Team Roles
Manage workspace access with organization-scoped users, invites, and role-aware controls.
Better Accountant is organization-scoped. Users operate inside a workspace, and backend access checks must resolve that workspace before returning client, document, or accounting state.
Roles
The product distinguishes firm users by role so sensitive actions can be limited.
Typical role boundaries:
| Role | Expected access |
|---|---|
| Owner | Full workspace, billing, team, and settings control. |
| Admin | Operational administration and most workspace settings. |
| Member | Day-to-day accounting work inside assigned workspace scope. |
| Reviewer | Review-oriented workflows where configured. |
Invites
Invites are tied to an organization, target email, role, token hash, expiration, and inviter.
Expired or revoked invites should not grant access, and accepted invites should be recorded for auditability.