Default roles and permissions [legacy]

⚠️ This article references the legacy permissions system. Front companies using the new permissions system can view the instructions here.

Front allows you to designate different levels of access to different teammates. In addition to the company admin role, there are two default teammate roles: 

1. Workspace admin

2. Member

The permissions of these default roles cannot be edited. The default roles are available on all plans. However, you can create custom roles and permissions for your teammates if you're on the latest Enterprise plan. 

The table below lists the permissions that are granted to teammates using Front’s default workspace admin and member roles.

The company admin role is the highest level of access in Front. To enable this role for a teammate, a company admin can click on the gear icon, then click Teammates in company settings. Select the teammate, toggle on their company admin status, then save.

The following company-level settings available to company admins only:

• Workspaces

• Teammate groups

• Company rules*

• Custom fields

• Company tags*

• Admin-only integrations in the App store

• Contacts settings

• Company preferences

• Billing

• Disable 2FA for other teammates

• Developer settings (build custom apps and manage API tokens)

*These features are available on the latest Enterprise plan. Some legacy plans may also have these features.

The workspace admin and member roles are available on all plans.

Enterprise plans with the custom user permission roles feature can create additional custom roles. Some legacy plans may also have this feature.