Trust
Roles and permissions
Built-in roles, per-action permission keys, and least privilege on day one.
The public release record lists v0.2.0 as available by request. These notes are not a guarantee that every workflow or provider integration is enabled in your build. Check the release record and ask support to confirm version-specific setup.
Built-in role starting points
Vendale includes starting roles such as Owner, Administrator, Support Manager, Agent, and Viewer. Each role is a bundle of permission keys; the exact names and grants can vary by workspace configuration and release.
Permission keys describe specific actions across product areas such as inbox, orders, broadcasts, automations, settings, and team. Examples include inbox.reply and orders.refund. Check the permissions shown in the installed workspace rather than relying on a role label alone.
Least privilege, day one
Grant each teammate the keys needed for their duties; review sensitive billing, settings, and team-management access separately. Do not assume a role label automatically grants or withholds a particular action.
Review the installed workspace's permission list and confirm the audit coverage for the actions your team relies on.
Verifying permissions
The source records permission changes as append-only audit events. Check the audit view in the exact release you use, and confirm it records the changes required by your process.
Next: request access to the desktop app or read the public changelog.