Every person in your organisation has a permission level that controls what they can do in Nagaris. You'll see it in the Permission column of the Users page and choose it in the Invite as field when inviting someone.
Owner — the highest level. Owners can do everything Administrators can, and are the only ones who can grant or remove the Owner permission.
Administrator — full management access: invite team members, resend and revoke invitations, edit organisation settings (practice details, branding, brand colours, tax agent details, sync preferences), manage users (permissions, job titles, roles, teams, rates, AML access), create or edit roles, and manage the organisation's billing settings (payment methods, transaction fees, payout account).
Member — standard staff access for day-to-day client work. Members see the workspace but not the management controls: they can't invite people or edit team, organisation or billing settings, and management fields on the Users page are read-only for them. The Billing settings link doesn't appear in their sidebar, and opening the settings page directly shows a notice that only admins and owners can manage billing settings.
Client — a restricted level for your firm's clients. Client users get a client-specific view rather than the staff workspace, and aren't shown in the Users page's Permission filter (clients are invited from their client page, not the Users page).
No Access — the person remains listed but can no longer access the organisation. Use it to deactivate a departed staff member without deleting their history.
Permissions are ranked: Owner above Administrator, above Member, above Client, above No Access. Throughout the help centre, firm admins means anyone with the Administrator or Owner permission.
Permissions are changed inline in the Permission column of the Users page (or in bulk — see managing your organisation's users):
Owners can set anyone to Owner, Administrator, Member or No Access.
Administrators can set people to Administrator, Member or No Access — they cannot grant or remove the Owner permission, and they can't change the permission of someone ranked above them.
Members and below can't change permissions; they see permission levels as read-only badges.
When a change succeeds you'll see a confirmation such as Permission updated to Administrator.
Nagaris keeps these as separate concepts, and all of them appear as columns on the Users page:
Permission — what someone can do in Nagaris (this article).
Role — their job role, such as Senior Accountant, created on the Roles page. Roles carry base and billable rates used for engagements and pricing, and one role can be marked as a person's primary role. Roles have no effect on what a person can access.
Team — the pod of staff they work with day to day, created on the Teams page (see Creating and managing teams (pods)). A team also has no effect on what a person can access.
So a Senior Partner might have the Owner permission, a Partner role, and belong to Pod 1, while a graduate has the Member permission, a Junior Accountant role, and belongs to Pod 2.
Certain sensitive areas have an extra per-person switch on top of permissions — for example AML Access on the Users page controls who can use anti-money-laundering features, independent of being a Member or Administrator.
The organisation's Billing settings page (payment methods, transaction fees, payout account) is restricted to Administrators and Owners only, even when the Billing feature itself is enabled for the firm.
You can't delete your own membership from the Users page — another administrator has to remove you.