Solavel controls access at two levels: an organization role decides what someone can do in the Portal for one organization, and an app role decides what they can do inside each app. This page lists every role, what it allows, where it is set, and the rules that limit who can grant what.
Where to find it
- Team in the Portal sidebar → Invite a teammate or edit an existing person. The form has a Role guide panel beside it that explains each role as you point at it.
- Organization sidebar → Members (members of the current organization) and Application Roles (
/portal/orgs/{organization}/application-roles). - Inside SolaStock and SolaHR → Team access, to choose the warehouses, departments or employees a scoped role covers.
Account types
When you invite someone you choose an Account type:
| Type | Who owns the account | Typical use | Notes |
|---|---|---|---|
| Company account | Your workspace | Employees with an address on your company domain (for example omar@alnoor.ae) |
You pick the user name and a domain from your organizations' websites or your company domains. Can receive Employee portal controls such as Create organizations. |
| Independent account | The person | External accountants, contractors, people with personal email | They keep their own account and can belong to other workspaces too. |
See Account types.
Organization roles
| Role (as shown) | Summary |
|---|---|
| Owner | Full control of the organization, its team, apps and billing. |
| Organization Manager | Runs the team and app assignments, without billing or settings. |
| Member | A regular teammate who works in the apps they are given. |
| Viewer | Can enter the organization but nothing more at this level. |
What each organization role can and cannot do
| Capability | Owner | Organization Manager | Member | Viewer |
|---|---|---|---|---|
| Open the organization workspace | Yes | Yes | Yes | Yes |
| Use apps | Every app in the plan | Assigned apps, per app role | Assigned apps, per app role | Only via app role |
| View team members | Yes | Yes | Yes | No |
| Invite new members | Yes | No | No | No |
| Edit and remove existing members | Yes | Yes | No | No |
| Assign members to apps and projects | Yes | Yes | No | No |
| Manage the organization's apps | Yes | Yes | No | No |
| Edit organization settings / delete it | Yes | No | No | No |
| View and manage billing and subscriptions | Yes | No | No | No |
| View reports | Yes | Yes | Yes | No |
| Export reports | Yes | Yes | No | No |
Owners have Full access. In the Team page, member lists and app cards, an owner is shown as Full access / Full access to every app / Organization owner. Owners are not limited by app roles in their organization.
The invitation form and the person edit form both choose the organization role per organization: Owner, Organization Manager, Member or Viewer (the Owner option only for workspace owners). In the edit form (since 6 October 2026) every ticked organization has its own Organization role field instead of one role for the whole person, and only an organization owner can change it. If you manage an organization without owning it you see the role as text with "Only an organization owner can change this role." and cannot untick that organization. An organization must always keep at least one active owner: demoting or removing the last one is refused with "The organization must retain an active owner."
App roles
App roles apply only inside that app, and only in organizations where the app is granted. A person must first have access to the app ("Application access must be granted before a role can be assigned.").
SolaCount
| Role | Can | Cannot |
|---|---|---|
| Accountant (Member) | Create, post and send invoices, receipts and credit notes; create, post and pay bills, expenses and debit notes; journals; bank import and reconciliation; prepare and file VAT returns; view and export reports; customers, vendors, quotes, orders; inventory items and adjustments | Change settings, users, taxes or organization setup; delete or retype accounts; reopen periods; approve fixed assets or owner transfers; bank rules or budgets; approve timesheets or mileage |
| Finance Manager | Everything an Accountant can do, plus approve fixed assets, depreciation and disposals; budgets, recurring templates, bank rules; approve timesheets, mileage, rental settlements; lock periods and view the audit log; dimensions, price lists, pricing rules | Manage users, organization settings or API keys; edit tax rates/codes; delete or retype accounts; unlock or reopen periods; approve or cancel sales/purchase orders |
| Sales | Customers and sales drafts; selling prices and sales balances; available quantities and delivery status | Post, collect, refund, reverse or override approvals without separate permissions; purchasing costs, profit margins, company financial statements; confirm stock delivery; settings, banking, team access |
| Purchasing | Suppliers and purchase drafts; supplier prices, purchasing history and supplier balances; available quantities and receiving status | Post, pay, refund, reverse or override approvals without separate permissions; customer transactions, company financial statements; confirm physical receipt; settings, banking, team access |
| Finance Viewer | Read-only: sales, purchases, payments, journals, banking, VAT returns, reports (view and export), master data, fixed assets, rentals, inventory | Create, edit, post or delete anything; view project financials; change settings |
Sales and Purchasing (added 10 October 2026) are commercial roles for people who prepare customer or supplier documents without being accountants; see Sales and Purchasing roles.
Fixed Asset Approver also exists but is not offered on standard invitations.
SolaStock
| Role | Summary | Scope |
|---|---|---|
| SolaStock Administrator | Full control of SolaStock (every warehouse, settings, integrations) and assigns members' warehouses in Team access. Cannot manage the organization, billing or members, or open other apps unless granted. | All of SolaStock in the organization |
| Inventory Manager | Receive, transfer, pick/pack/ship, reserve; zones and bins; create and edit purchase orders; stock ledger and reports. Cannot approve/cancel POs, post adjustments or opening stock, edit the catalog, create warehouses, change settings or export. | Assigned warehouses only; none assigned = sees none |
| Warehouse Manager | Receiving, transfers, bins, shipping. Cannot create/approve POs, see ledger/reports, post adjustments, edit catalog or settings. | Assigned warehouses |
| Warehouse Operator | Receive against approved POs, transfer between assigned warehouses, pick/pack/ship. | Assigned warehouses |
| Inventory Viewer | Read-only dashboard, items, warehouses, balances, sales orders and fulfillment. | Assigned warehouses |
Warehouses are chosen in SolaStock → Team access.
SolaProjects
| Role | Summary | Scope |
|---|---|---|
| Projects Administrator | Sees and opens every project; creates, edits, deletes, archives and restores projects; manages members, tasks, financials; approves everyone's time. Cannot create portfolios or administer other apps. | All projects except explicit restrictions |
| Projects Manager | Edits projects they manage; adds/removes members; creates, assigns and deletes tasks; views financials and approves the team's time. Cannot create projects without a separate creation grant, see other projects, or delete/archive. | Projects they belong to |
| Projects Member | Views their projects and tasks, updates their own tasks, logs and submits their own time. | Projects they belong to |
SolaHR
| Role | Summary | Scope |
|---|---|---|
| SolaHR Administrator | Everything in SolaHR (employees, attendance, leave, payroll), HR settings and audit log; assigns members' departments and employees in Team access. Cannot manage the organization, billing or members. | All of SolaHR |
| HR Manager | View employees and edit name, job title and work email; record today's attendance; approve or reject leave; attendance and leave reports; manage HR access for teammates in scope. No payroll without a separate owner grant; cannot create/delete employees or change settings. | Assigned departments or employees |
| Department Manager | Same daily operations as HR Manager (attendance, leave, reports) without managing others' HR access; no payroll or employee files. | Assigned departments or employees |
| Attendance Recorder | Records today's attendance for assigned employees. | Assigned employees, today only |
| HR Viewer | Read-only employees, attendance, leave and reports. | Assigned departments or employees |
Older roles HR Operations Manager (includes payroll) and HR Records Viewer (includes payroll) may still appear on existing members but are not offered on new invitations. Departments and employees are chosen in SolaHR → Team access.
Coming-soon apps
SolaPOS (POS Administrator, Store Manager, Cashier) and SolaFone (Store Manager, Cashier) roles are listed in the role guide for organizations that have those apps; the apps themselves are not generally available yet.
Who can grant what (delegation ceiling)
- Owners can grant every app role offered for an app in their organization.
- Non-owners (for example an Organization Manager) can grant app roles only if they have authority to manage access in that organization and the assign-to-apps permission, and only roles they hold themselves in that app. An Organization Manager who is Accountant (Member) in SolaCount can give others Accountant (Member) but not Finance Manager.
- Employee portal controls (such as Create organizations) can only be granted by someone who holds that control, and only to Company accounts.
- An inactive membership must be reactivated before access or roles can change ("Reactivate this organization membership before changing application access or roles.").
- When a role is assigned to yourself, you confirm "I understand and want to assign this application role to myself." Some roles cannot be self-assigned by an owner (for example Projects Member, Fixed Asset Approver and Cashier).
Members receive notifications when they join, when their role or access changes and when they are removed.
Worked example
Al Noor Trading LLC uses SolaCount Advanced (includes SolaProjects and SolaStock):
| Person | Organization role | App roles | Result |
|---|---|---|---|
| Fatima (owner) | Owner | Full access | Everything, including billing |
| Khalid | Organization Manager | SolaCount: Finance Manager | Manages team assignments, closes periods; no billing |
| Omar | Member | SolaCount: Accountant (Member) | Posts invoices and bills, files VAT |
| Noura | Member | SolaCount: Sales | Prepares customer quotes and sales drafts; sees selling prices; cannot post or see purchasing costs |
| Sara | Member | SolaStock: Warehouse Operator (Jebel Ali warehouse) | Receives and ships only in Jebel Ali |
| External auditor | Viewer (Independent account) | SolaCount: Finance Viewer | Read-only books and reports |