Skip to content

Roles and permissions

Every person in an organisation has exactly one role. The role decides what they may do; it is not a job title.

The four roles

Role In one line
Admin Runs the organisation. The only role that can change the plan, manage users, and add devices.
Accountant Works with money and documents end to end, but does not administer the organisation.
Create invoice Issues invoices and manages the clients and items behind them.
View invoice Reads everything, changes nothing.

What each may do

Admin Accountant Create invoice View invoice
Read invoices, clients, items yes yes yes yes
Create and submit invoices yes yes yes —
Credit and debit notes yes yes yes —
Manage clients and items yes yes yes —
Record payments, reconcile yes yes — —
Purchases and vendors yes yes — —
VAT filing report yes yes — —
Branches yes — — —
ZATCA devices and certificates yes — — —
Users and invitations yes — — —
Company profile yes — — —
Plan and billing yes — — —
API keys yes — — —

Read this table as a guide, not a specification

It reflects how the roles behave in the app today. Where a screen disagrees with this table, the screen is correct — tell us at support@goclix.ai so the table can be fixed.

Why View invoice exists

Auditors, bookkeepers and owners who want oversight without the risk of a mistaken submission. A cleared invoice cannot be deleted — only corrected with a credit note — so read-only access is a real safeguard, not a courtesy.

One role per person, per organisation

If someone belongs to two organisations they have a role in each, and the roles need not match. The role applies to the organisation you are currently working in; the sidebar always names it.

Changing someone's role

An Admin changes a role from User Management. The change takes effect the next time that person loads a page. A person cannot change their own role, and an organisation must keep at least one Admin.