Roles and permissions matrix

Updated on Friday 22 May 2026

Complete table of what each role (Owner, Admin, Member) can do across every area of the product.

This table shows exactly which permissions each of Citauno’s 3 roles has for every area of the product. For an introduction to roles, see Team and roles.

The business’s Accounts and access screen

General table

✅ = allowed | ❌ = denied | 🔒 = own only

Action Owner Admin Member
Log in
View the dashboard 🔒 (limited version)
Change personal language/password

Business settings

Action Owner Admin Member
View settings
Change logo / cover / description
Change currency / time zone
Change confirmation mode / booking rules
Change cancellation policy
Change contact details
Change social media
Edit tax data (RUC, legal name)
Change the subscription plan
Cancel the business
Transfer the business to another user

Locations

Action Owner Admin Member
View the location list 🔒 (only where they work)
Create a location
Edit a location
Activate/deactivate a location
Delete a location

Professionals / Team

Action Owner Admin Member
View the team list 🔒 (only themselves)
Add a professional
Edit a professional 🔒 (only themselves)
Change a professional’s email
Change a user’s role
Invite new users
Resend/revoke invitations
Remove a user’s access
Delete a professional
Configure others’ working hours
Configure own working hours ❌ (configurable by admin)

Services

Action Owner Admin Member
View the service list
Create a service
Edit a service
Delete a service
Enable/disable online bookings
Configure per-professional overrides

Bookings

Action Owner Admin Member
View own bookings
View the whole team’s bookings
Create a manual booking
Edit a booking 🔒 (own only)
Confirm / reject pending ones 🔒 (own only)
Reschedule 🔒 (own only)
Cancel 🔒 (own only)
Mark completed 🔒 (own only)
Mark no-show 🔒 (own only)
Edit internal notes 🔒 (own only)

Calendar

Action Owner Admin Member
View the full calendar (everyone)
View own calendar only
Drag and drop bookings 🔒 (own only)
Create a booking from the calendar

Blocked times

Action Owner Admin Member
View the team’s blocked times 🔒 (own only)
Create a blocked time for anyone
Create own blocked time
Edit blocked times 🔒 (own only)
Delete blocked times 🔒 (own only)

Customers

Action Owner Admin Member
View the customer list 🔒 (only own customers)
Edit customer details 🔒 (own only)
Delete a customer
View a customer’s booking history 🔒 (only their own customer)
Mark a customer as VIP
Import customers from CSV

Promotions

Action Owner Admin Member
View discount codes
Create a discount code
Edit / deactivate a code
Delete a code
Apply a code on a manual booking

WhatsApp and notifications

Action Owner Admin Member
View WhatsApp usage
Connect your own WhatsApp Business account
Change message templates
Buy message packs
View WhatsApp conversations
Reply to WhatsApp conversations

Analytics

Action Owner Admin Member
View the metrics dashboard 🔒 (own only)
Bookings by period 🔒
Total revenue
No-show rate 🔒
Most popular services
Most-booked professional
Export reports (CSV)

Billing

Action Owner Admin Member
View invoice history
Download invoices
Change payment method
Update tax data
View cost details

Special cases

The owner is also a professional

If the owner adds themselves as a professional record, they keep all Owner permissions + see their own calendar like any member.

One person in several businesses

A user can belong to multiple businesses with different roles. For example:

  • Owner at “Bella Studio”.
  • Admin at “Otro Salón”.
  • Member at “Centro Estético X”.

When they log in, they see a selector at the top to choose the active business.

Account without a professional record

A person can have dashboard access without serving customers. For example: an accountant with the Admin role who only looks at reports. They don’t appear on the calendar.

Retroactive permissions

If you downgrade someone from Admin to Member:

  • They lose access to settings, other professionals, and other bookings.
  • The bookings they created as Admin still exist (they aren’t deleted).
  • The discount codes they created stay active (they can’t modify them).

Difference from “Platform admin” (super-admin)

Citauno has an additional level outside any business: the platform super-admin (/platform). This is only for the Citauno team (us), not part of the product you manage. It’s used for support, migrations, and aggregate data.

A regular user never has this permission.