Product · Admin & Permissions

Configure once. Run everywhere.

The most under-rated feature in Groundwork is its permission model. Every screen in the platform is individually assignable to roles. Start from a sensible company default, then customize per person.

Book a demo→See all features
Roles & permissions

Screen-level access. Not module-level.

Most CRMs give you two roles: admin and user. Groundwork gives you six by default, all configurable, all with per-screen granularity — because a service business is not two kinds of people.

  • →
    Six default rolesOwner, Management, Sales, Estimator, Field, View-only.
  • →
    Screen-level matrixGrant Pipeline but not Financial. Grant Reports but not Payments.
  • →
    Company defaultsSet once as the baseline. Future hires start from there.
  • →
    Per-person overrideCustomize any role for any individual when the case calls for it.
Roles & Permissions LIVE · SCREEN LEVEL
Owner
Full views
Mgmt
43 views
Sales
21 views
Estimator
7 views
View
4 views
View Access Matrix
View
Office
Sales
Estimator
View
Pipeline
Leads
—
—
Clients / Properties
—
Financial Overview
—
—
—
Invoices
—
—
—
Payments
—
—
—
Schedule
Work Orders
—
Field Mode
—
—
—
Audit Log
—
—
—
Approval Queue PENDING · 4 ITEMS
Change order · +$4,200
Aleman · Full landscape · Marcus (Sales)
Estimate discount · −15%
Grumley · Tree removal · Tyler (Sales)
Refund request · $340
Ozawa · Maintenance · Angela (Office)
Workflow, templates & audit

Automation without magic.

Groundwork's workflow engine lets you trigger tasks, emails, stage changes, and approvals from events across the platform — with a full audit log for compliance-conscious operators.

  • →
    TemplatesReusable emails, checklists, forms, and estimates.
  • →
    AAR Template builderConfigure the end-of-day report question set — Yes/No, text, rating, checklist, dropdown.
  • →
    Approval QueueEstimates, change orders, and financial changes gated by approval.
  • →
    Audit LogWho changed what, when, and from where. Immutable.
  • →
    Access ModesCompany-wide policies: SSO, IP restrictions, 2FA enforcement.
  • →
    IntegrationsQuickBooks, Google, Stripe, Twilio, Zapier, and open API.
Audit Log IMMUTABLE HISTORY
Events (7d)
142
Unique Actors
6
Permission Changes
2
Recent Events
Estimate discounted −15%Tyler · 2m ago
Role permission changedTyler · 18m ago
Client Portal access revokedTyler · 1h ago
Try the Audit Log yourself →
Audit Log

Who changed what, when, and from where. Immutable.

Every discount, permission change, and portal-access revocation is logged automatically — append-only, visible to Owners, and impossible to edit or delete, including by an Owner.

  • →
    Append-only by designNothing in the log can be edited or deleted after the fact.
  • →
    Filterable by categoryFinancial, access, and schedule events, filtered at a glance.
  • →
    Full detail on demandEvery entry expands to the underlying record it changed.
  • →
    Built for compliance-conscious operatorsThe paper trail exists whether or not you ever need it.
Employees & Teams

Everyone's role, team, and access — in one roster.

Employees & Teams is where staff get created, assigned to a role and a crew, and tied to the permission model above. It's the roster the rest of Admin points back to.

  • →
    One roster, every seatOffice, sales, estimators, and field crews in one place.
  • →
    Team assignmentEvery person tied to a crew or department for scheduling.
  • →
    Status at a glanceActive, on leave, or offboarded — no guessing who is available.
  • →
    Feeds Roles & PermissionsAssign a role here; the access matrix applies automatically.
Employees & Teams ROSTER · 24 PEOPLE
Active
22
On Leave
1
Teams
5
Roster Recently active
Marcus Reyes
Sales · Sales Team
Active
N. Knesley
Foreman · Crew A
Active
D. Patel
Estimator · Estimating
Active
J. Ozawa
Field · Crew B
On Leave
Try Employees & Teams yourself →
Client Portal

Give clients their own door — that you still control.

Clients sign in at their own portal to see the status of their job, without ever touching your internal workspace. Staff manage every invite from Admin, and can step into a client's exact view to troubleshoot.

  • →
    Scoped, read-only accessClients see their own properties, jobs, and invoices — nothing else.
  • →
    Invite & disable from AdminStaff control who gets portal access, and can revoke it instantly.
  • →
    Preview as clientStep into a client's exact portal view to troubleshoot or demo — no separate login.
  • →
    Real activity logLogins, invites, and update-published events tied to work orders — auditable.
Client Portal ADMIN · MANAGE ACCESS
Active Users
1
Pending Invites
1
Disabled
1
Portal Users 3 total
Nicole Knesley
Logged in 2d ago
Active
D. Patel
Invited · not yet accepted
Pending
R. Aleman
Revoked by Tyler
Disabled
Recent Portal Activity
EventActorDetailDateLoginNicole KnesleyPortal homeJul 6Invite sentTylerD. PatelJul 3Access revokedTylerR. AlemanJun 28
Try Client Portal yourself →

Related in Product

All features
The complete capability list.
Read more →
Platform architecture
Data model, integrations, security.
Read more →
Security
How Groundwork protects your data.
Read more →
Roles overview
What each seat sees.
Read more →
Book a demo

The permission model that fits your real team.

Walk through your org chart with us — we will map it into Groundwork's access matrix in the demo.