Help Center › Team & Admin › Roles & permissions
Roles & permissions
Control exactly what each team member can see and do. Use the three built-in roles for simple setups, or create custom roles with granular permissions for larger teams.
Built-in roles
Every Asan CRM account comes with three roles that cannot be deleted or renamed:
- Owner — unrestricted access to the entire account. There is exactly one owner per account. Only the owner can manage billing, delete the account, or transfer ownership.
- Admin — sees all leads and activity, can manage the pipeline, configure integrations, and adjust settings. Cannot access billing or manage other admins.
- Agent — sees only their own assigned leads, calls, and tasks. Ideal for sales reps who need a focused workspace without distractions.
Built-in roles always exist on your account. You cannot delete them, but you can create custom roles alongside them.
Creating a custom role
- Open Roles. Navigate to Admin in the sidebar, then click Roles.
- Click Create Role. Enter a descriptive name (e.g., "Team Lead" or "Junior Agent") and an optional description.
- Toggle permissions. Each permission has an on/off toggle. Enable only what this role needs — see the full permissions list below.
- Save. The role is immediately available for assignment when inviting or editing team members.
Start with the Agent role as a baseline and add permissions as needed. It is easier to grant access than to remember to revoke it later.
Permissions breakdown
The table below shows the default permissions for each built-in role. Custom roles can mix and match any combination.
| Permission | Agent | Admin | Owner |
|---|---|---|---|
| View own leads | Yes | Yes | Yes |
| View all leads | No | Yes | Yes |
| Edit leads | Own only | All | All |
| Delete leads | No | Yes | Yes |
| Manage pipeline | No | Yes | Yes |
| View reports | Own | All | All |
| Manage team | No | No | Yes |
| Access billing | No | No | Yes |
| Configure integrations | No | Yes | Yes |
"Own only" means the user can edit leads that are assigned to them but cannot modify leads belonging to other agents.
Assigning roles to team members
You can set a role when inviting a new member, or change it later:
- Go to Users in the sidebar.
- Click a team member to open their profile.
- Select a role from the Role dropdown — built-in or custom.
- Save. The new permissions take effect on the member's next page load.
When inviting a new member, the role dropdown appears on the invitation form. See Managing team members for the full invite flow.
Changing a member's role from Admin to Agent will immediately restrict what they can see. Make sure to communicate role changes to your team before applying them.
Frequently asked
Can I delete a built-in role?+
No. The Owner, Admin, and Agent roles are permanent and cannot be deleted or renamed. You can create custom roles with different permission sets if the built-in roles do not fit your needs.
Can I have multiple owners?+
No. Each account has exactly one owner. If you need to transfer ownership, contact support.
What happens if I delete a custom role that has members assigned?+
Members assigned to the deleted role are automatically moved to the default Agent role. Review their permissions after the change to make sure access is appropriate.
Can an agent see reports for the whole team?+
By default, no. Agents only see their own performance data. To give an agent team-wide reporting access, create a custom role with "View reports: All" enabled.
How many custom roles can I create?+
There is no limit on the number of custom roles. Create as many as your organization requires.
Was this article helpful?
Thanks — we'll use this to make the docs better.
Last updated 16 Jun 2026 · Applies to: Asan CRM