Roles and permissions explained

Muninnbase has three roles. This article is the reference card. For the operational side (inviting, editing, resetting, removing) see Invite and manage your team.

Three roles, in one paragraph

Employee can use the chat (ask questions, view sources, give feedback). Nothing more. Manager can do everything Employee can do, plus keep the library current (upload, delete, Sync Now), read the Q&A log, and work the unanswered events queue. Admin can do everything Manager can do, plus manage users, change settings, and handle billing.

Default for new invites is Employee. Promote only when someone actually needs the elevated access.

The full permission matrix

This is the authoritative list. If a feature is not on the matrix, treat it as Admin-only by default.

How to choose a role for someone

Employee for everyone whose job is to ask the system questions and read the answers. That's most of your team.

Manager for the people who own the documents and the unanswered queue. Typically the office manager, the operations lead, or whoever the team naturally goes to with policy questions. A small business usually has one or two managers.

Admin for the owner-operator and one backup. Two admins is the typical right number. Promoting everyone to Admin sounds collaborative but makes destructive actions (delete a doc, wipe the tenant) easier to do by accident.

The "last admin" guard

You cannot demote or delete the only Admin. Muninnbase does not let a tenant strand itself without anyone who can manage settings, users, or billing.

If you need to hand the role to someone else, the move is: promote the new person to Admin first, then change the original's role (or remove them). Same applies if the current Admin is leaving the company.

Common scenarios

"My HR lead just left. How do I transfer Admin?" Promote the new person to Admin from the users table. Once they show as Admin in the row, demote or remove the previous person.

"Can a Manager invite users?" No. Only Admins can add, edit, or remove users. If you want to delegate user management, the person needs to be an Admin.

"Can an Employee see other people's questions?" No. Employees only see the chat. The Q&A log is Manager and Admin only, and it is anonymous either way. The log doesn't store who asked which question. See Review the Q&A Log for the privacy details.

What to do next

When you're ready to invite people, Invite and manage your team walks through the dialog, the email, and the lifecycle from Pending to Active.