What do the default roles allow?

New organizations start with these roles:

• Admin ("Full access to all features and settings"): every permission except View Assigned Properties Only.
• Employee ("Operational access without admin functions"): day-to-day work on properties, leases, tenants, maintenance, inspections, tasks, notices (prepare and serve), vendors, owners, invoices, documents, applications and screening; view, create, edit transactions and generate financial reports; inbox and announcements; Kai including creating and editing records with AI; reports view and export; notification settings; view the team. Employees can't delete leases, properties, owners or transactions, force-terminate leases, manage bank connections, approve transactions, run owner disbursements, use the Wallet, manage billing, integrations, tags, knowledge base or accounting settings, or change the team.
• Guest ("Read-only access to organization data"): view-only access to properties, leases, tenants, maintenance, inspections, tasks, notices, vendors, owners, invoices, documents, applications, inbox, announcements and groups, plus Kai.
• Landlord ("Full access for individual property owners"): everything except team management.
• Owner and Tenant roles exist for the owner and tenant portals and aren't assigned to staff.

Admins can edit default roles, so an organization's Employee may differ from the description above. Check the saved role.