> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cxp.crescendo.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and permissions

> Understand the standard CXP roles and what each role is intended to do.

# Roles and permissions

CXP uses tenant-scoped roles to decide what each user can see and change.

## Owner

Owners have full tenant access. Use this role for the primary tenant operators who can manage users, settings, teams, channels, assistants, and customer work.

## Admin

Admins can manage tenant configuration and normal support operations. This role is appropriate for administrators who do not need a distinct owner designation.

## Team lead

Team leads focus on operational support work. They can handle conversations, manage assignment workflows, and use team-level operational tools, but they do not manage all tenant settings.

## Agent

Agents handle customer conversations. They can read conversations, reply, create manual conversations, update conversation details, and work with contacts and organizations when enabled.

## User

Users have limited app access. Use this role when a person needs access to supported non-support workflows but should not handle customer conversations.

## Viewer

Viewers can read conversations but cannot reply, assign, or administer tenant configuration.

## Permission changes

After changing a user's role, ask the user to refresh or sign in again if their session does not immediately reflect the new access.