Roles and Permissions

A LightLead workspace has exactly two roles: owner and member. There are no separate Admin / Operator roles in the team ACL (those are Telegram ACL roles — see Telegram roles).

At a glance

	Owner	Member
Billing / subscription	Yes	No
Invites / team management	Yes	No
Integrations	Yes	by scope
Reports	Yes, all	only allowed sources/accounts
Attribution	Yes	No (the attribution source is always closed)
Scope allowed_sources / allowed_accounts	n/a (full access)	required

Owner

The creator / owner of the installation. Full access, manages seats and invites.

Member

A restricted actor. Access is limited by scope:

• allowed_sources — a list of source keys (meta_ads, google_ads, kommo_crm, …)
• allowed_accounts — an optional whitelist of account ids by source
• An empty allowed_sources → effectively no access to sources
• attribution is always forbidden for members

Related

• Invitations
• Account Access
• Telegram roles — a separate model