Users & Roles
Understand RBAC, default roles, and how record scopes limit which Leads, Customers, and Opportunities each user can access.
Last updated: August 2026
TradePacer CRM uses role-based access control (RBAC) with record scopes. Permissions are granular; scopes limit which records a user can see and act on. Authorization is enforced server-side on every request, the frontend never grants access by itself.
Default roles
- Super Administrator: full installation administration
- System Administrator: broad administration with restricted financial and compliance approvals
- Sales Manager / Team Leader: team-scoped CRM and commercial supervision
- Sales Agent: own-scoped Lead and Opportunity operations
- Compliance Officer: KYC, Risk assessment, and Onboarding case review
- Research Analyst / Research Approver: research authoring and publication workflow
- Payroll / Finance: Payments verification, allocation, and revenue reporting
- Auditor: read-only operational access
Record scopes
Scopes merge across roles: OWN, TEAM, DEPARTMENT, and ALL. A Sales Agent typically works within OWN scope; managers operate at TEAM or DEPARTMENT level. Policies combine permissions with scope before any record is returned or modified.
Assign the minimum scope required for each role. Elevated ALL scope should be limited to administrators and auditors who genuinely need cross-department visibility.