MrCAPI Logo
Back to help list
CRM Basics

Configuring Team Roles & Permissions

Last updated: July 18, 2026
MrCAPI enforces strict role-based access control (RBAC) to keep customer records secure. ### 1. Role Classifications - **SUPER_ADMIN**: Platform-level control. - **ORG_ADMIN**: Workspace owner. Full billing, settings, and team control. - **ORG_MANAGER**: Team leads. Can manage queues, view reports, and reassign leads. - **ORG_AGENT**: Sales representatives. Can view and edit only their assigned leads. ### 2. Enforcing Isolation Our backend queries verify the requester's `organizationId` on every database read or write, ensuring agents cannot access records from other teams.

Was this guide helpful?