Roles and permissions matrix

Updated on Wednesday 09 September 2026

Complete table of what each role (Owner, Admin, Manager, Professional) can do across every area of the product.

This table shows exactly which permissions each of Citauno’s 4 roles has in each area of the product. For an introduction to the roles, see Team and roles.

The business’s Accounts & access screen

First things first: two different dashboards

Citauno has two surfaces for the team:

The admin dashboard (/admin/your-business/…). Owner, Admin, and Manager get in. A Professional does not: opening a dashboard link sends them back to the home page.
The professional’s calendar (citauno.com/p/your-business). This is the screen for whoever serves clients: their calendar, their bookings, their blocks. Anyone on the team with a professional record linked to their account can open it.

Almost every difference in the table below comes from that split.

General

✅ = allowed | ❌ = denied | 🔒 = their own only

Action	Owner	Admin	Manager	Professional
Sign in	✅	✅	✅	✅
Enter the admin dashboard	✅	✅	✅	❌
Open their calendar at `/p` (with a linked record)	✅	✅	✅	✅
See the business dashboard	✅	✅	✅	❌
Change their own language, password, and personal details	✅	✅	✅	✅

Business settings

Action	Owner	Admin	Manager	Professional
View settings	✅	✅	❌	❌
Change logo / cover / description	✅	✅	❌	❌
Change currency / timezone	✅	✅	❌	❌
Change confirmation mode / booking rules	✅	✅	❌	❌
Change the cancellation policy	✅	✅	❌	❌
Change contact details and social links	✅	✅	❌	❌
Edit tax details (tax ID, legal name, address)	✅	✅	❌	❌
Translate the business content into other languages	✅	✅	❌	❌

Watch the tax details: contrary to what many people assume, the tax ID and legal name live inside Settings, so an Admin can edit them. If you want someone to stay away from those, give them the Manager role.

Subscription and Citauno billing

Action	Owner	Admin	Manager	Professional
See the plan and subscription status	✅	✅	❌	❌
Cancel or reactivate the subscription	✅	✅	❌	❌
Add or remove seats	✅	✅	❌	❌
View and download invoices	✅	✅	❌	❌
Apply a promo code	✅	✅	❌	❌
Buy WhatsApp message packs	✅	✅	❌	❌
Transfer the business to another person (done by support)	❌	❌	❌	❌
Delete the business from the dashboard	❌	❌	❌	❌

The last two rows aren’t a missing permission: those features don’t exist yet in Citauno, for anyone.

Locations

Action	Owner	Admin	Manager	Professional
View the location list	✅	✅	❌	❌
Create a location	✅	✅	❌	❌
Edit a location (address, hours, contact)	✅	✅	❌	❌
Activate / deactivate a location	✅	✅	❌	❌

The delete button on a location deactivates it: it doesn’t erase the history.

Professionals / Team

Action	Owner	Admin	Manager	Professional
View the team list	✅	✅	❌	❌
Add a professional	✅	✅	❌	❌
Edit a professional’s record	✅	✅	❌	❌
Edit their own record (photo, bio, colour, hours)	✅	✅	❌	❌
Set anyone’s working hours	✅	✅	❌	❌
Assign services and a location to a professional	✅	✅	❌	❌
Set a professional’s commission	✅	✅	❌	❌
Deactivate a professional	✅	✅	❌	❌

Accounts & access

Action	Owner	Admin	Manager	Professional
See who has access	✅	✅	❌	❌
Invite with the Admin or Manager role	✅	✅	❌	❌
Grant a professional access from their record	✅	✅	❌	❌
Resend or revoke an invitation	✅	✅	❌	❌
Change someone’s role	✅	✅	❌	❌
Deactivate or reactivate someone’s access	✅	✅	❌	❌
Change the Owner’s role	❌	❌	❌	❌

Two more system rules: nobody can demote themselves below Admin, and the Owner’s row has no role selector.

Services

Action	Owner	Admin	Manager	Professional
Open the services screen	✅	✅	❌	❌
Create / edit a service	✅	✅	❌	❌
Create / edit service categories	✅	✅	❌	❌
Turn online booking on or off for a service	✅	✅	❌	❌
Limit a service to certain professionals or locations	✅	✅	❌	❌
Set a price or duration per professional	❌	❌	❌	❌

That last row is a feature that doesn’t exist yet: price and duration belong to the service. See Which services each professional performs for the workaround.

Bookings

Action	Owner	Admin	Manager	Professional
See the whole team’s bookings	✅	✅	✅	❌
See their own bookings	✅	✅	✅	✅
Create a manual booking for anyone	✅	✅	✅	❌
Create a booking for themselves	✅	✅	✅	✅
Confirm / reject pending bookings	✅	✅	✅	🔒
Reschedule	✅	✅	✅	🔒
Cancel	✅	✅	✅	🔒
Mark completed / no-show	✅	✅	✅	🔒
Edit internal notes, total price, or assigned professional	✅	✅	✅	❌

Calendar

Action	Owner	Admin	Manager	Professional
See the whole business calendar	✅	✅	✅	❌
Filter by location, professional, or status	✅	✅	✅	❌
Create a booking or block from the calendar	✅	✅	✅	🔒
See their own schedule at `/p` by day and by week	✅	✅	✅	✅

Blocked times

Action	Owner	Admin	Manager	Professional
See the business’s blocks	✅	✅	✅	🔒 (the ones affecting them)
Block the whole business or a location	✅	✅	✅	❌
Block any professional	✅	✅	✅	❌
Create their own block	✅	✅	✅	✅
Edit / delete blocks	✅	✅	✅	🔒
Create recurring blocks	❌	❌	❌	❌

Recurring blocks don’t exist yet for any role. See Block time.

Clients

Action	Owner	Admin	Manager	Professional
See the client list	✅	✅	✅	❌
Create a client	✅	✅	✅	✅ (while creating a booking)
Search for a client	✅	✅	✅	✅ (from the booking form)
Edit client details	✅	✅	✅	❌
Delete a client	✅	✅	✅	❌
Merge two duplicate client records	✅	✅	✅	❌
Block / unblock a client	✅	✅	✅	❌
See a client’s booking history	✅	✅	✅	❌
Mark a client as VIP	❌	❌	❌	❌
Import clients from a CSV file	❌	❌	❌	❌

The last two rows don’t exist in Citauno. To flag a client, use the notes field on their record; to bring over an old client list, today you either enter it by hand or let clients register themselves as they book.

Promotions

Action	Owner	Admin	Manager	Professional
View discount codes	✅	✅	❌	❌
Create / edit / deactivate a code	✅	✅	❌	❌
View campaign links	✅	✅	❌	❌

WhatsApp and notifications

Action	Owner	Admin	Manager	Professional
See WhatsApp usage	✅	✅	❌	❌
Buy message packs	✅	✅	❌	❌
Connect your own WhatsApp Business number	✅	✅	❌	❌
Configure low-balance alerts	✅	✅	❌	❌

The WhatsApp conversations inbox isn’t part of the business dashboard: it’s an internal Citauno team screen used for support.

Analytics and commissions

Action	Owner	Admin	Manager	Professional
See the Analytics dashboard (with the module on)	✅	✅	✅	❌
See revenue, no-shows, and top-booked services	✅	✅	✅	❌
See the Commissions report	✅	✅	❌	❌
See a professional’s Performance tab	✅	✅	❌	❌
Export reports to CSV	❌	❌	❌	❌

CSV export isn’t available yet on any dashboard screen.

Client invoicing (invoicing module)

These rows only apply if your business has the invoicing module enabled.

Action	Owner	Admin	Manager	Professional
Issue and view client invoices	✅	✅	✅	❌
Manage products and inventory	✅	✅	✅	❌
See invoicing reports	✅	✅	✅	❌
Change the invoicing configuration	✅	✅	❌	❌

Special cases

The owner is also a professional

If the owner adds themselves as a professional record and links their account, they keep every Owner permission and can open their calendar at /p. The two surfaces coexist.

One person across several businesses

A user can belong to multiple businesses with different roles. For example:

Owner at “Bella Studio”.
Admin at “Another Salon”.
Professional at “Aesthetic Centre X”.

On sign-in they get a selector at the top to pick the active business. Citauno remembers the last business they used.

An account with no professional record

Someone can have dashboard access without serving clients. For example: a front-desk supervisor with the Manager role. They don’t appear as a column in the calendar, because they have no record.

Retroactive permissions

If you drop someone from Admin to Manager:

They lose access to settings, team, services, locations, discounts, and subscription.
The bookings they created still exist (nothing is deleted).
The discount codes they created stay active (they just can’t edit them anymore).

If you drop them to Professional, they also stop entering the dashboard: they only see their own schedule from then on.

How this differs from “platform admin” (super-admin)

Citauno has one more level outside any business: the platform super-admin (/platform). That’s for the Citauno team only, not part of the product you manage. It’s used for support, migrations, and aggregate data; it’s also where the WhatsApp conversations inbox lives.

A normal user never has this permission.