> ## Documentation Index
> Fetch the complete documentation index at: https://docs.theagencyengineer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and permissions

> Understand what admins, members, and custom roles can see and change.

Roles control what each teammate can see and do across the agency. The Agency Engineer ships with three built-in **System** roles and lets you create unlimited **Custom** roles tailored to your operation.

Open **Agency Roles Management** from the sidebar to manage them.

## Agency Roles Management dashboard

The header shows:

* **Agency Roles** — count of all roles in the agency.
* **Total Permissions** — the full permission catalogue (currently **79**).

Use the **Search roles** box to find a role, or select **+ Create Role** to build a new one.

## Built-in (System) roles

These three roles cannot be deleted and have curated permission sets:

| Role             | Description                                                                                    | Sample permissions                                                       |
| ---------------- | ---------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------ |
| **Agency Owner** | Full control within the agency: team management, roles, business operations, and all settings. | GoHighLevel Integration, Edit Businesses, Facebook Integration, +38 more |
| **Agency Admin** | Manages team members, business settings, and day-to-day agency operations.                     | Monday Reports, GoHighLevel Integration, Manage Client Users, +38 more   |
| **Team Member**  | Standard access to assigned businesses and features within the agency.                         | View Reports, Monday Report Automation, Monday Reports, +2 more          |

<Note>
  A reserved platform role, `saas_super_admin`, exists above Agency Owner and is only used by The Agency Engineer staff. It can't be assigned from this screen.
</Note>

## Custom roles

Create roles that match your job functions. Example custom roles already shipped in the workspace:

* **Media Buyer** — *Specialised access to advertising campaigns, budget management, and performance reporting.* Includes Manage Primary Facebook Connection, Create Businesses, Edit Businesses, and 14 more.
* **Strategist**
* **Tech**

Custom roles show a **Custom** badge in the role list and have edit/delete actions in the **Actions** column.

## Create a new role

Select **+ Create Role** to open the two-step wizard.

<Steps>
  <Step title="Role Details">
    Provide a name (for example, *Client Reporting Analyst*) and an optional description that appears in the User Management dropdown.
  </Step>

  <Step title="Assign Permissions">
    Use the dual-list picker to move items from **Available Permissions** (paginated, 48+ items across 5 pages) to **Assigned Permissions**.

    Permissions are categorised with coloured badges:

    * **Advertising** — Manage Ad Budgets, Pause & Resume Ads, etc.
    * **Ai** — Monday Report Automation, Monday Reports, Manage Monday Templates, etc.
    * **Business** — Create Businesses, Edit Businesses, etc.
    * **Integration** — Facebook Integration, GoHighLevel Integration, etc.
    * **Users** — Manage Client Users, etc.

    Use the **Search here** box to filter, then select **Create Role** to save.
  </Step>
</Steps>

<Tip>
  Name roles after outcomes ("Reporting — read only") rather than job titles alone ("Analyst"). Job titles drift faster than the access they need.
</Tip>

## Permission categories at a glance

The 79 permissions fall into broad areas you'll combine when designing custom roles:

| Category     | Examples                                                                          |
| ------------ | --------------------------------------------------------------------------------- |
| Advertising  | Manage Ad Budgets, Pause & Resume Ads                                             |
| AI features  | Monday Reports, Monday Report Automation, Manage Monday Templates                 |
| Businesses   | Create Businesses, Edit Businesses                                                |
| Integrations | Facebook Integration, GoHighLevel Integration, Manage Primary Facebook Connection |
| Users        | Manage Client Users                                                               |
| Reports      | View Reports                                                                      |

## Editing and deleting

Custom roles show pencil and trash icons in the **Actions** column. System roles can be inspected but not edited or deleted — duplicate them as a custom role if you need a starting point.

<Warning>
  Deleting a role removes it from any users currently assigned to it. Reassign affected users first or you'll lock them out of features they relied on.
</Warning>

## Next steps

<CardGroup cols={2}>
  <Card title="Invite teammates" icon="user-plus" href="/getting-started/workspace/invite-teammates">
    Assign roles using the Create User wizard.
  </Card>

  <Card title="Organization settings" icon="building" href="/getting-started/workspace/organization-settings">
    Manage agency-wide settings and seat usage.
  </Card>
</CardGroup>