Roles and permissions

CoreBookin uses three roles inside a business: Owner, Staff, and Customer. Each role has a fixed set of permissions — there's no à la carte permission editor today.

Owner

Full control of the business: profile, services, hours, staff, billing, notifications, and refunds. Most businesses have one owner; a small business might never need any other role.

• Update business profile and address
• Invite, edit, deactivate, or remove staff
• Create, edit, and delete services
• Manage billing, subscriptions, and refunds
• Configure notifications, including SMS settings
• Everything Staff can do, plus the above

Staff

Day-to-day operations. Staff can run the schedule and serve customers but can't change billing, invite other staff, or issue refunds.

• View and edit the schedule
• Create, confirm, cancel, reschedule, and complete bookings
• View customer contact info for booked appointments
• View notification delivery logs for the business
• Take payments at point of sale

Staff can't manage billing, invite other staff, issue refunds, change the business profile, or change SMS / channel settings.

Customer

People who book with you. Their access is limited to their own bookings and notification preferences — they can't see anything about your business beyond the public booking page.

• Create and view their own bookings
• Cancel or reschedule their own bookings
• Update their own notification preferences and contact details

One role per email

An email address can only hold one role at a time on the platform. The same person can't be both an Owner of one business and a Customer of another using the same email — they'd need separate emails. See changing your email for how to switch.

Changing a role

Today, role changes after the invite stage aren't supported in-app. To promote a staff member to owner (or vice versa), email [email protected] with the business name and the people involved.