> ## Documentation Index
> Fetch the complete documentation index at: https://learn.nexudus.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and Permissions

> Understand how user roles control access to features and data in the Nexudus Dashboard.

## Overview

The Nexudus Dashboard uses a role-based access system to control what each team member can see and do. This ensures that staff only access the tools they need, keeping your data secure and your workflows focused.

## How roles work

Each user in your Dashboard is assigned one or more roles. Roles determine:

* Which modules and pages are visible in the sidebar
* Which records the user can view, create, edit, or delete
* Which settings the user can change
* Which locations the user can access

<Info>
  A user can have multiple roles combined. Permissions are additive — if any assigned role grants access to a feature, the user can access it.
</Info>

## Built-in role levels

Nexudus provides several levels of access that can be combined to create the right permissions for each team member:

### Platform Administrator

Full access to all locations, settings, and features. Platform administrators can:

* Manage all locations in the network
* Create and manage other users and their roles
* Configure billing, integrations, and global settings
* Access all modules without restriction

<Warning>
  Limit the number of platform administrators. This role has unrestricted access to all data and settings across your entire Nexudus account.
</Warning>

### Location Manager

Day-to-day management access for one or more specific locations:

* View and manage members, bookings, and check-ins
* Handle invoices and billing
* Manage resources and content
* Access reports and analytics for assigned locations

### Front Desk / Operations Staff

Focused access for handling daily operations:

* Check members in and out
* Create and manage bookings
* View member profiles
* Handle help desk messages and visitor logs

### Finance

Access to financial tools and records:

* View and manage invoices
* Process payments and refunds
* Access contracts and billing runs
* Export financial data

### CRM

Access to sales and relationship management tools:

* Manage CRM boards and opportunities
* Create and send proposals
* Track tasks and reminders
* Handle document templates

## Module-based access

In addition to roles, some features are only available if the corresponding module is enabled for your location. For example:

| Module      | Features unlocked               |
| ----------- | ------------------------------- |
| CRM Boards  | Pipeline boards, opportunities  |
| Courses     | Course creation and management  |
| Video Rooms | Video collaboration rooms       |
| Surveys     | Feedback surveys and form pages |

<Note>
  If you don't see a feature in your sidebar, it may be because the module isn't enabled for your location or your role doesn't include access to it. Contact your platform administrator to enable modules.
</Note>

## Managing users and roles

To manage who has access to your Dashboard:

<Steps>
  <Step title="Go to Settings">
    Navigate to **Settings → Users & Roles** in the sidebar.
  </Step>

  <Step title="Add or edit a user">
    Create a new user or select an existing one to modify their role assignments.
  </Step>

  <Step title="Assign roles">
    Select the roles that match the user's responsibilities. You can assign multiple roles to create a custom permission set.
  </Step>

  <Step title="Assign locations">
    Choose which locations the user can access. This limits their view to only the relevant spaces.
  </Step>

  <Step title="Save">
    Confirm the changes. The user's sidebar and available features will update immediately.
  </Step>
</Steps>

## Best practices

<Tip>
  Follow the principle of least privilege — give each user only the access they need to perform their job.
</Tip>

* **Create specific roles** for different job functions rather than giving everyone administrator access.
* **Review access regularly** when team members change roles or leave your organization.
* **Use location restrictions** to prevent staff at one location from accidentally modifying data at another.
* **Test as the user** by signing in with a test account to verify that the right features are visible.

## Related pages

<CardGroup cols={2}>
  <Card title="Users & Roles Settings" icon="user-gear" href="/platform/settings/users-and-roles">
    Detailed guide to configuring users and custom roles.
  </Card>

  <Card title="Multi-Location Management" icon="building" href="/platform/multi-location">
    Control access across multiple locations.
  </Card>
</CardGroup>