Granular Access ControlBy Role & Location
Four built-in roles with customizable permissions. Control exactly what each team member can see and do across your entire organization.
Role Types
Four standard roles designed for multi-location organizations
Corporate Admin
Full system access across all locations and settings
Best for: CEO, CFO, Operations Director
Regional Manager
Manage multiple locations within assigned region
Best for: Regional Directors, Area Managers
Location Manager
Manage single location operations and team
Best for: General Managers, Facility Directors
Staff
View-only access for front-line team members
Best for: Front Desk, Sales Associates
Permissions Matrix
Detailed breakdown of what each role can do
| Feature | Corporate Admin | Regional Manager | Location Manager | Staff |
|---|---|---|---|---|
| View All Locations | region | single | single | |
| Add/Remove Locations | ||||
| Manage Users | region | location | ||
| Configure White-Label | ||||
| Set up SSO | ||||
| View Financial Reports | region | location | ||
| Manage Billing | ||||
| Configure Payouts | request | |||
| Handle Claims | region | location | view | |
| Export Data | region | location | ||
| API Access | readonly | |||
| Custom Integrations |
Setting Up User Roles
How to add users and assign roles across your organization
Define Organizational Structure
Map out corporate, regional, and location hierarchy
Determine which locations belong to which regions
Create User Accounts
Invite users via email with their assigned role
Settings → Users → Add User
Assign Locations
Link each user to their location(s) or region
Regional managers can oversee multiple locations
Set Custom Permissions (Optional)
Override default role permissions for specific users
Give location manager extra permissions as needed
Review and Activate
Users receive invitation emails and can log in immediately
They'll see only what they're permitted to access
Real-World Examples
How different organizations structure their permissions
National Gym Chain (50 locations)
Structure
- 1 Corporate Admin (CEO)
- 3 Regional Managers (East, West, Central)
- 50 Location Managers (one per gym)
- 200 Staff (front desk, trainers)
Implementation
Corporate sets company-wide policies, regional managers track area performance, location managers handle day-to-day operations, staff can view their location's insurance sales.
Franchise Business (100+ locations)
Structure
- 1 Corporate Admin (Franchisor)
- 100+ Location Managers (Independent franchisees)
- No regional managers (flat structure)
Implementation
Corporate admin manages brand and master settings. Each franchisee has full control of their location as location manager with their own payout account.
Enterprise with Subsidiaries
Structure
- 1 Corporate Admin (Parent company)
- 5 Regional Managers (One per subsidiary brand)
- 30 Location Managers (Across all brands)
- 150 Staff
Implementation
Parent company sees consolidated view. Each subsidiary operates semi-independently with regional manager oversight. Location managers focus on their facility.
Custom Permissions
Override default role permissions for specific use cases
Allow location manager to view other locations' performance
How To
Edit user → Custom Permissions → Enable 'View Other Locations Dashboard'
Why
Useful for location managers who oversee multiple sites or want benchmarking data
Give staff member claim handling ability
How To
Edit user → Custom Permissions → Enable 'Manage Claims'
Why
Customer service staff who need to help members file claims
Restrict corporate admin from certain locations
How To
Edit user → Location Access → Uncheck specific locations
Why
Joint ventures or partnerships where some locations have restricted access
Frequently Asked Questions
Can one person have multiple roles?
No, each user has one primary role. However, you can customize permissions for any user to add specific capabilities beyond their base role. For example, a Location Manager can be given Regional Manager permissions for specific features.
What happens when a location manager leaves?
Deactivate their account in Settings → Users. You can immediately reassign their location to a new manager. All historical data and settings remain intact.
Can I create custom roles?
Yes, Enterprise accounts can create custom roles with specific permission sets. Contact your account manager to configure custom roles for your organization.
How do regional managers get assigned to regions?
When creating or editing a regional manager account, you assign them to specific locations. They automatically have access to all locations in their region.
Can staff see customer data?
Staff can view anonymized insurance purchase data (number of policies, coverage types) but cannot see member names, email addresses, or payment details unless given explicit custom permissions.
Is there a limit on users per location?
No limit on users. You can have as many staff accounts as needed at each location. Common setup is 1 location manager + 3-10 staff per location.