> ## Documentation Index
> Fetch the complete documentation index at: https://docs.astradial.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and permissions

> Understand what each role can do in Astradial — Owner, Admin, Manager, and Agent.

Astradial uses **role-based access control** (RBAC). Every user has a role that determines what they can see and do in the dashboard.

## The four roles

| Role        | Permissions                                | Best for                      |
| ----------- | ------------------------------------------ | ----------------------------- |
| **Owner**   | Everything — full control                  | Business owner, primary admin |
| **Admin**   | Almost everything (except API key secrets) | IT administrators             |
| **Manager** | View calls, recordings, users, CRM         | Team leads, supervisors       |
| **Agent**   | Own calls, tickets, click-to-call only     | Call center agents            |

## Detailed permission breakdown

### Organisation and settings

| Permission              | Owner | Admin | Manager | Agent |
| ----------------------- | ----- | ----- | ------- | ----- |
| Edit org settings       | Yes   | Yes   | No      | No    |
| Manage API keys/secrets | Yes   | No    | No      | No    |
| View billing and usage  | Yes   | Yes   | No      | No    |
| Deploy Asterisk config  | Yes   | Yes   | No      | No    |

### User management

| Permission                | Owner | Admin | Manager | Agent |
| ------------------------- | ----- | ----- | ------- | ----- |
| Invite/delete users       | Yes   | Yes   | No      | No    |
| Assign any role           | Yes   | Yes   | No      | No    |
| Assign manager/agent role | Yes   | Yes   | Yes     | No    |
| View user list            | Yes   | Yes   | Yes     | No    |
| View own profile          | Yes   | Yes   | Yes     | Yes   |

### Phone numbers and queues

| Permission              | Owner | Admin | Manager | Agent |
| ----------------------- | ----- | ----- | ------- | ----- |
| Buy/configure numbers   | Yes   | Yes   | No      | No    |
| View numbers and queues | Yes   | Yes   | Yes     | No    |

### Calls

| Permission           | Owner | Admin | Manager | Agent |
| -------------------- | ----- | ----- | ------- | ----- |
| View all call logs   | Yes   | Yes   | Yes     | No    |
| View own calls only  | Yes   | Yes   | Yes     | Yes   |
| Listen to recordings | Yes   | Yes   | Yes     | No    |
| Download recordings  | Yes   | Yes   | No      | No    |
| Delete recordings    | Yes   | Yes   | No      | No    |
| Click-to-call        | Yes   | Yes   | Yes     | Yes   |

### Tickets

| Permission             | Owner | Admin | Manager | Agent |
| ---------------------- | ----- | ----- | ------- | ----- |
| View tickets           | Yes   | Yes   | Yes     | Yes   |
| Create/update tickets  | Yes   | Yes   | Yes     | Yes   |
| Delete/archive tickets | Yes   | Yes   | Yes     | No    |

### Workflows and bots

| Permission              | Owner | Admin | Manager | Agent |
| ----------------------- | ----- | ----- | ------- | ----- |
| Create/edit workflows   | Yes   | Yes   | No      | No    |
| View workflows          | Yes   | Yes   | Yes     | No    |
| Manage bots (AI config) | Yes   | Yes   | No      | No    |

### CRM

| Permission                     | Owner | Admin | Manager | Agent |
| ------------------------------ | ----- | ----- | ------- | ----- |
| View contacts/companies/deals  | Yes   | Yes   | Yes     | Yes   |
| Create/edit CRM records        | Yes   | Yes   | Yes     | Yes   |
| Delete CRM records             | Yes   | Yes   | Yes     | No    |
| Customize fields and pipelines | Yes   | Yes   | No      | No    |
| Assign to users                | Yes   | Yes   | Yes     | No    |

### API and integrations

| Permission             | Owner | Admin | Manager | Agent |
| ---------------------- | ----- | ----- | ------- | ----- |
| Create/revoke API keys | Yes   | Yes   | No      | No    |
| View API keys          | Yes   | Yes   | No      | No    |
| Manage webhooks        | Yes   | Yes   | No      | No    |

## View permissions in the dashboard

Go to **Role Permissions** in the sidebar to see the full permission matrix for your organization. Your current role is shown as a badge at the top of the page.