Permissions matrix

Permissions are umbrella permissions — each one covers a whole area of the app rather than splitting every action into separate read/manage toggles. You grant them to team members when you add them; see Permissions and roles for how to think about them.

What each permission grants

This table lists everything a permission can grant. In your admin, each description is trimmed to your plan — a permission never mentions a screen your plan doesn’t include (see Plans and billing).

Permission	Grants
Appointments	Run the front desk: view, create, and manage all appointments, and take payment at checkout — including applying coupons and selling or redeeming gift cards. Stylists without this permission can still view their own appointments.
Refund Overrides	Deviate from the cancellation and no-show policies for one appointment: refund more or less, or keep a different amount. A reason is always required and recorded. Marking a policy-following no-show needs only the Appointments permission.
Pricing Overrides	Change the service or add-ons on an existing appointment, and add paid add-ons mid-visit. A reason is required when the change reprices the appointment.
Scheduling Overrides	Book past scheduling rules: beyond the booking window customers can normally book, and before a stylist’s start date. Each override is confirmed per slot and recorded.
Customers	Work with client records: profiles, notes, visit history, and client tags, importing a client list from a file, and building intake forms and waivers, and reading signed responses. Signed forms can include health information — grant accordingly.
Catalog	Manage services, categories, collections, add-ons, and packages.
Inventory	Manage products and their retail and cost prices, stock levels, adjustments, and write-offs, professional-use (backbar) product logging, and the low-stock reorder list. Selling a product at checkout is Appointments; product sales in the books are Financials.
Marketing & Growth	Grow the business: email campaigns and the win-back programme, creating and managing discount codes, the gift card programme and its settings, the loyalty programme and its reward catalogue, and booking-page traffic — including which of your clients visited without booking, with their names and contact details. Campaigns go to every opted-in client — this permission can email your whole list.
Financials	Access the bookkeeping page and its transaction history, the financial dashboard cards, analytics, invoice settings, and correcting gift card balances and refunding gift card purchases.
Payroll	See and set what each team member is paid — commission rates, hourly rates and pay structures, pay runs, including everyone’s earnings, tips and hours, payroll exports for your accountant or payroll provider, and whether card tips are shared between the team. This shows what every colleague earns — grant it accordingly. Clocking people in and out is Team, and it does not need this.
Subscription & Billing	Manage the JustBook subscription: change the plan, update the payment method, and buy add-ons, message credits, and extra storage. This permission spends the business’s money.
Team	Manage the team: stylists and user accounts. Does not include deciding what each role can do — that is Roles & Access.
Roles & Access	Decide who can do what: edit roles and their permissions, grant override permissions to individual team members, and revoke anyone’s override codes. Someone with this permission can grant themselves or others any other permission — treat it like the admin role.
Settings	Configure the business: business info, branding, branches, the customer journey and booking policies, reminders, notifications, and team alerts, tags and statuses, integrations, invoice configuration, and data export.
System Logs	View system logs: the activity/audit trail, notification deliveries, payment events, reminder history, and override usage.
Data requests	Handle data requests from clients — someone asking to see, correct, or delete what you hold about them. Whoever has this permission is who we email when a request comes in, so give it to the people who will actually answer.

Built-in roles

Every business starts with these roles: Admin, Manager, Receptionist, Stylist. Admin always has every permission and can’t be limited. The permissions on the other roles are defaults you can change — edit any role under Settings → Team to match how your business works.

One exception worth knowing: a stylist without the Appointments permission can still view and manage their own appointments — the permission gates access to everyone’s appointments, not a stylist’s own calendar.