Skip to main content

User Management, Roles, and Permissions

How to manage user role-based access controls as an Admin

Written by Rye Jones
Updated over a month ago

This service is designed and operated in alignment with FedRAMP Moderate security requirements when configured in accordance with the provider’s documented recommendations. Customers acknowledge and agree that failure to implement or maintain the recommended security configurations may increase risk and that they assume full responsibility for any resulting security incidents, data loss, or service impacts. The provider disclaims liability for issues arising from customer-managed configurations that deviate from recommended practices.

NextStage uses a role-based access control system to manage what users can view, create, edit, and delete within your workspace.

User permissions are determined by their assigned role. These permissions control access to features such as pipelines, opportunities, reports, templates, and administrative settings.


Default User Roles

When a new user is invited, they are assigned the Member role by default.

Each role determines what actions users can perform in the system.

Common Role Types

Role

Description

Admin

Full access to all workspace features, including managing users, editing templates, and deleting records

Member

Standard user access for managing opportunities, pipeline data, and reports

Analyst

Limited editing access, focused on reporting and analysis

View Only

Read-only access with no editing permissions

Admins have the highest level of access and control.


What Admins Can Do

Admins can:

  • Invite and remove users

  • Change user roles

  • Edit pipeline templates and custom fields

  • Configure integrations

  • Modify security settings

  • Permanently delete opportunities, pipelines, and other data


What Members Can Do

Members can typically:

  • Create and update opportunities

  • Manage pipeline information

  • Create and view reports

  • Add notes and tasks

Members cannot:

  • Edit system templates

  • Manage user accounts

  • Permanently delete critical system data

This ensures system integrity while allowing teams to manage pipeline activity.


Viewing and Managing User Roles

Admins can manage user roles from the Admin page.

To manage user roles:

  1. Navigate to Admin in the left menu

  2. Click the Users tab

  3. Locate the user

  4. Select a role from the Role dropdown next to their name

    Changes take effect immediately.


Viewing Role Permissions

Admins can view detailed permissions for each role.

To view role permissions:

  1. Go to Admin

  2. Click the Roles tab

This page shows which roles can:

  • View

  • Create

  • Edit

  • Delete

  • Manage templates

If you need custom roles or permission changes, contact NextStage Customer Success.


Disabling User Access

Disabling a user prevents them from accessing the workspace without deleting their account.

To disable a user:

  1. Go to Admin

  2. Click the Users tab

  3. Change the user's Status to Disabled

This immediately removes workspace access.


Restricting Workspace Access (Recommended)

To improve security, you can restrict workspace access to invite-only.

To enable invite-only access:

  1. Go to Admin

  2. Click the Security tab

  3. Enable

  4. Make workspace invite only

This ensures only invited users can access your workspace.

Invitations:

  • Are single-use

  • Expire after 7 days


Deleting Users

Admins can permanently remove users from the workspace.

To delete a user:

  1. Go to Admin

  2. Click the Users tab

  3. Click the Trash Can icon next to the user


What Happens When a User Is Deleted

When a user is deleted:

  • Dashboard ownership is transferred to the admin performing the deletion

  • Saved searches remain in the workspace

  • Notes and activity history remain

  • Tasks are unassigned

  • Pending invitations created by that user are cancelled

No opportunity data is lost.


Best Practices

We recommend:

  • Limiting Admin access to system administrators only

  • Assigning Member access to capture managers and BD staff

  • Using View Only access for leadership and reviewers

  • Enabling invite-only workspace access

This ensures proper security and data governance.

Did this answer your question?