CRM Basics
Configuring Team Roles & Permissions
Last updated: July 18, 2026
MrCAPI enforces strict role-based access control (RBAC) to keep customer records secure.
### 1. Role Classifications
- **SUPER_ADMIN**: Platform-level control.
- **ORG_ADMIN**: Workspace owner. Full billing, settings, and team control.
- **ORG_MANAGER**: Team leads. Can manage queues, view reports, and reassign leads.
- **ORG_AGENT**: Sales representatives. Can view and edit only their assigned leads.
### 2. Enforcing Isolation
Our backend queries verify the requester's `organizationId` on every database read or write, ensuring agents cannot access records from other teams.
