Permissions: Allowed, Team-wide access, If responsible, Denied
Corteksa has two kinds of permissions: switches that turn features on, and levels that decide which records, chats and emails a person sees. If someone has several roles, the highest level among them applies.
Two kinds of permissions
1) Feature switches: allowed or denied, such as managing members, roles, templates, dashboards and business hours. The full list is in Every feature switch in a role.
2) Access levels: set for each Cortex Unit, each chat channel and each type of mailbox.
The four levels
From highest to lowest: Allowed, then Team-wide access, then If responsible, then Denied. Team-wide access always includes the person’s own records, even if they’re in no team.
The units matrix (for each Cortex Unit)
More in Unit permissions: view, edit, add, delete, export and assign.
The channels matrix (for each channel)
Rows: WhatsApp Web (Cortex Chat), WhatsApp Cloud, Facebook, Instagram, TikTok and WhatsApp Groups.
WhatsApp Groups have their own rule, because a group has no record. More in Chat channel permissions for each role.
The email matrix (for each mailbox type)
Rows: Gmail, Outlook / Microsoft 365, and IMAP / SMTP. The same actions: read, create, update and delete. (Outlook is connected as IMAP for now.) (Outlook is connected as IMAP for now.)
More in Mailbox permissions for each role.
Who goes past the matrix
The owner and super admins see everything. See Member ranks: owner, super admin and member.
A new unit
When a unit is created, its creator’s roles get Allowed and every other role gets If responsible, without any role going above its usual level. So a read-only role stays read-only.
If you see nothing
A record or chat you can’t see shows as “not found”. An empty list means your level covers nothing there, not that you’re blocked from the page.
At a glance
A real example
The director wants each salesperson to see only their own clients, and each team lead to see all of their team’s clients.
- A “Sales” role: view and edit If responsible, delete Denied, and assign Denied.
- A “Team lead” role: view, edit and export Team-wide access, and assign Allowed.
- She put each team lead and their salespeople in one team.
Everyone sees exactly what’s theirs, in tables, chats, dashboard numbers and live updates.