Team & Permissions
Give your team their own logins and control what each person can see and do.
What it does
You rarely run WhatsApp alone. Each teammate gets their own login, and each login belongs to a role that decides what that person can access. A support agent, a marketer and an owner each get the level of control they need, and no more.
Adding and removing people
Our team sets up users and roles for your workspace, so changes go through support:
- Send us the person's name, email address and the role they need.
- We create their account and share their sign-in details.
- On first sign-in, they turn on two-factor authentication before they can use the workspace.
When someone leaves, tell us straight away and we'll deactivate their account. A deactivated account can't sign in.
Roles and permissions
- A role (a permission group) is a set of things a person is allowed to do, for example "Owner", "Agent" or "Marketer".
- Each role lists what its members can do: view customers, send broadcasts, manage templates, change settings, and so on.
- Change a role and everyone in it is updated at once.
- Menu items a person isn't allowed to use simply don't appear for them, and the action itself is refused too: someone whose role can view chats but not delete them gets "You do not have permission" if they try.
- Each module has separate view, create, update and delete permissions, so a role can, for example, read workflows without being able to edit or run them.
Security built in
- Two-factor authentication is required for every user. Each person signs in with their password plus a code from an authenticator app, so a stolen password alone isn't enough to get in.
- Everyone gets recovery codes for the day they lose their phone.
- Sensitive actions ask you to confirm your password again.
Good to know
- Give people the least access they need to do their job. It's safer and keeps their screens simpler.
- Think in roles, not people. Asking for "another Agent" is quicker and tidier than a custom set of permissions for each person.
- Keep recovery codes somewhere safe, away from the phone that has your authenticator app.
Good roles let your team move quickly while keeping the important switches in the right hands.
