Roles & Permissions

The Right Access for Every Person on Your Team

From owners to security guards, each person sees only what their job needs, across only the properties they are assigned to.

Roles

Nine Ready-Made Roles, Plus Your Own

Start with sensible defaults and adjust. Organizations can create custom roles in Staff & Roles.

Owner / Landlord

Full control of the organization, settings and billing.

Manager

Day-to-day operations across assigned properties.

Accountant

Payments, expenses, statements, tax and eTIMS.

Leasing

Tenants, leases and move-ins.

Receptionist

Front-desk tasks, enquiries and complaints.

Auditor

Read-only view for review.

Caretaker

Field tasks limited to assigned properties.

Maintenance

Assigned jobs and updates.

Security

Visitor approvals and gate tasks.

Property Scope

Limit People to the Properties They Look After

A caretaker at Riverside never sees Westlands. Every list, record, PDF, file and export is checked against the person's assigned properties.

  • Permissions are checked on every page and action
  • Records from another organization return "not found"
  • Suspended users are signed out on their next request
  • Custom roles for the way your team really works
Account Security

Strong Sign-In and a Paper Trail

Two-factor sign-in

Works with any authenticator app. Eight one-time recovery codes are issued, stored hashed. Organizations can require it for everyone.

Throttled login

Five failed attempts lock the account for 15 minutes, and wrong two-factor codes count too.

Sign out everywhere

Changing a password or turning on two-factor signs out every other device.

Audit log

Sensitive actions are recorded with before and after values, so you can see who changed what, and when.

SMS password reset

A six-digit code is sent through your own SMS gateway, expires in 10 minutes and works once.

Temporary passwords

New accounts must change their password on first sign-in.

Put the Right Access in the Right Hands

See roles and permissions set up in a demo.

Encrypted credentials M-Pesa and SMS keys encrypted at rest
Tenant isolation Every organization's data is separate
Built for Kenya KSh, M-Pesa, KRA and DPA-aware
Full audit trail Sensitive actions are logged