Role-Level Access (RLA) is a new permission system that lets you decide exactly who can view, edit, bill, or manage in every corner of Firstbase.
Whether you’re bringing on an accountant, a head of compliance, or a co-founder, you can now mix-and-match granular roles instead of handing over the “full keys to the kingdom.”
Role-Level Access is expected to launch the week of July 14th, 2025. An email will be sent to all Firstbase account owners on the launch date.
Below you’ll find:
- A quick primer on how the system works
- A detailed rundown of every role available at launch
- A cheat-sheet on assigning and combining roles
How Role-Level Access Works
| Concept |
What it means |
Why? |
| Roles |
Named permission bundles (e.g., Billing manager, Finance administrator). |
You get clear labels instead of cryptic rules, making it easier to assign permissions. |
| Role groups |
Folders that organize roles (e.g., Workspace Roles, Product Roles). The workspace includes common-areas, such as the dashboard, whereas product roles refer to products such as Firstbase Agent. |
Roles are organized, making it obvious which area of the app a role affects. |
| Parent / child roles |
Selecting the Administrator parent role auto-selects all child roles beneath it; you can then deselect any you don’t need. |
With one-click you can grant “full access,” but if you need more flexibility, you’ve got it. |
| Default viewer access |
Every member gets baseline view-only access to common pages (dashboard, company details, etc.). |
Nobody is locked out of context, but they can’t break things (e.g. make purchases). |
| Audit & email trail |
Every role change is logged, and the affected member (plus all Admins) instantly receive a notification email. |
You get transparency and compliance out of the box. |
Workspace Roles
| Role |
What they can do |
Common use-cases |
| Account Owner |
Superuser—all actions everywhere, plus the exclusive ability to transfer ownership. |
Original founder or primary legal owner. |
| Administrator |
Everything an Owner can do, including managing users, but cannot transfer ownership or make changes to other administrators’ roles. |
Ops lead, CTO, COO. |
| Workspace Editor |
Full action rights in all non-product tabs (Dashboard, Company details, etc.). View-only billing and member management. |
Executive assistant who needs to view next steps or take action. |
| Workspace Viewer (default) |
Read-only dashboard; most links and buttons are disabled; certain tabs are hidden (Banking Solutions, Equity, Rewards). Can download company documents. All members are granted this at minimum. |
Ops member. |
| Billing Manager |
Manage subscriptions and invoices inside the Billing modal—nothing else. |
Paired with other roles for a CFO or finance team member handling SaaS spend. |
Product-Specific Roles
| Role |
Grants full access to… |
| Finance administrator |
Accounting product (bookkeeping, transactions, integrations, etc.). |
| Head of compliance |
Agent product (registered agent services, compliance dashboard, etc.). |
| Mailroom manager |
Mailroom product (view mail, send mail, etc.). |
| Sales tax expert |
Sales Tax product (coming soon). |
| Tax lead |
Tax Filing product (forms 5472, 1099, etc.). |
(Future-looking roles such as Bill pay approver or Controller will arrive as the Accounting team expands features.)
Assigning Roles
- Invite or edit a member → opens the Roles sidebar.
- Check any mix of Workspace or Product roles.
- If you choose Administrator, all child roles auto-select; uncheck any you don’t want.
- Send invites or Update access—the member is updated instantly, receives an email, and the change is recorded.
Tip: Members can be added en masse, just enter multiple emails before selecting Send invites.
Next Steps
Existing users: We’ve already mapped your old access to the closest matching roles—check your inbox for a detailed email.
Ready to try it? After we launch, just head to User Management in the left sidebar and start tailoring roles!
FAQs
Q. Can a Workspace editor pay invoices or manage subscriptions?
A. Not unless you also grant them the Billing manager role.
Q. Who can change another Administrator’s roles?
A. Only the Account owner—this prevents privilege escalation. Administrators can, however, change their own roles.
Q. Will product teams add more granular roles?
A. Yes. The system is built so each product team can introduce new roles without a platform release.
Still have questions? Reach out to support here. We’re excited to put more control in your hands!
