Back to Help Center

Understanding User Roles

Category: Workflows & Concepts Last updated: Dec 1, 2025
Understanding User Roles in Project Ledger

Understanding User Roles in Project Ledger

Welcome to Project Ledger! This guide explains the different roles a user can have within the platform. Understanding these roles is key to knowing who can perform which actions and how to manage your team effectively.

Two Levels of Access: Platform vs. Group

The most important concept to understand is that there are two distinct levels of permissions in the system: Platform Roles and Group Roles.

  • A Platform Role grants a user administrative privileges across the entire Project Ledger application. These roles are very powerful and are assigned only by the main platform administrator.
  • A Group Role defines a user's permissions within a specific Portfolio (Group). This is the most common type of role, and it's what you will manage on a day-to-day basis as a group owner or manager.

INFO: A single user can have both a Platform Role and a Group Role. For example, a user could be a Support Staff member at the platform level and an Owner of their own personal group.

Group Roles Explained

These roles are assigned on the Manage Team page of a specific portfolio. They control what a user can do with that group's projects, members, and finances.

TIP: You can view your current role and manage other team members (if you have permission) by navigating to your portfolio dashboard and clicking the Team button.

Owner

The Owner is the creator of the group and has the highest level of authority within that portfolio. There can only be one Owner per group.

  • Has all the permissions of an Admin.
  • Can manage the group's billing and subscription details.
  • Is the only user who can grant access to Support Staff.
  • Is the only user who can permanently delete the group.
  • The Owner's role cannot be changed, and they cannot be removed from their own group.

Admin (Manager)

The Admin role is for trusted partners or managers who need broad control over the portfolio's operations.

  • Can invite, remove, and change the roles of other members (except the Owner).
  • Can create new projects within the group.
  • Can edit project details and manage project-level teams.
  • Has full access to view and add financial transactions for all projects in the group.

Associate (Investor)

This is the primary role for capital contributors. It is designed to give investors the visibility they need while protecting the group's operational integrity.

  • Can view all projects and financial reports within the group.
  • Can be designated as a contributor when capital is added to a project.
  • Has limited ability to add or edit information, focused mainly on viewing data.

IMPORTANT: To protect financial records, once a user with the Associate (Investor) role makes a capital contribution to any project within the group, their role in that group is permanently locked. It cannot be changed to another role.

Employee (Staff)

This role is for internal team members who are actively working on projects but are not investors.

  • Can be assigned to specific projects by an Admin or Owner.
  • Permissions are primarily focused on the projects they are assigned to.
  • Typically can view project details and may be granted permissions to add expenses or other data.

Contractor

This role is designed for external individuals or companies who are contributing to a project in a limited capacity.

  • Access is generally restricted to only the specific projects they are assigned to.
  • This role has the most limited permissions by default, focused on task-specific access.

Platform Roles Explained

These special roles are not managed within a group. They are set by the owner of the Project Ledger platform and grant system-wide privileges. You will not be able to assign these roles yourself.

Super Admin

A Super Admin has the highest possible level of access across the entire platform.

  • Can view and manage all users, groups, and projects in the system.
  • Can configure platform-wide settings.
  • Can assign Platform Roles to other users.
  • Has access to all administrative dashboards.

Support Staff

The Support Staff role is a special, limited-access role used for troubleshooting.

  • Cannot view any user data by default.
  • Can only gain temporary, read-only access to a group's data if a group Owner explicitly grants them access via the Support page.
  • This ensures your data remains private unless you specifically request assistance.