The roles matrix

The role library holds 24 roles: 20 operational roles and 4 account roles, built from 132 permissions. Every seat carries exactly one account role plus any number of operational roles, and holds the union of their permissions. What a seat sees follows mechanically from what it holds - see Roles and the shape of your app, which also shows which hub each screen sits in.

Two floors sit underneath the tables below:

• Universal: every role, without exception, can read its own notifications (the bell) and use Support, the support portal.
• The member read floor: most operational seats also share a baseline of read-only screens. In the tables, “the shared screens” means exactly this set: Today, Reservations (its Inquiries, Bookings, Past stays and Extensions tabs), Guest Screening, Guests, Reviews, Lock Codes, Calendar, Properties, Daily Report, Report Builder.

task-only seats

task_only is not a role - it is a seat flavor that suppresses the member read floor. It exists for portal-only people (Cleaner, Inspector, Maintenance, Investor, External Accountant): their role is composed without the floor, and the task-only seat keeps the account side from adding it back. Inviting one of these roles on an ordinary member seat would hand them the read floor their role was designed not to carry.

Report Builder shows only your data

Report Builder appears for any seat that can read at least one of its data sets, and each data set checks its own permission. Two seats with the page can see different data sets in it.

Some screens are additionally plan-gated. A seat whose role reaches such a page on a plan without the feature sees it locked, pointing at Billing:

Feature	Screens
Channel sync (Starter and above)	Channels, Bookings to Review
Finance suite (Operator and above)	ROI, Monthly Break-even, P&L Report, Property Reports, the property Finance tab, Assets, Period Close
Owner and investor portals (Growth and above)	Owner Portal, Investor Portal
Booking website (Operator and above, or an add-on)	Booking website
API access (Operator and above)	API keys, Webhooks
Xero / QuickBooks export (Operator and above, or an add-on)	Accounting export
Price rules (Enterprise, or an add-on)	Price rules
AI messaging (add-on only)	AI assistant

Account roles

Role	Who it’s for	What it reaches and does
Admin	The operator running the workspace	Every screen in the app except the Housekeeping queue and the two external portals (Owner Portal, Investor Portal). Full org config: Settings, Feature status, Team, Access matrix, Duty Roster, Billing, Audit (with Product usage), WhatsApp, Fees & Taxes, Guest tax, property bank accounts (a Treasury dialog), properties and listings, Access, Maintenance, Issues, guest app, booking website, Channels and Bookings to Review, Import Bookings, Message Templates, Agent Hub (view and manage - including the door-code rule), AI assistant, Price rules, API keys, Webhooks, Accounting export, the full finance read suite, expense capture and categories. Deliberately not held: verifying payments, recording transactions, refunds, cancelling bookings, sending lock codes, and housekeeping work - those stay with the roles below.
Owner	The person whose property you operate - external	Owner Portal only (their own properties’ statements and bookings, scoped to themselves), plus the bell and Support. Not an operator seat; no member floor.
Billing Manager	Whoever manages your Stay n Host subscription	The shared screens plus Billing (plan, seats, invoices, paying them) and the finance reports (P&L Report, Property Reports, ROI, Monthly Break-even), with their exports.
Member	The baseline everyone else builds on	Exactly the shared screens - read-only operational awareness, no write powers beyond it.

Guest-facing and funnel roles

Role	Who it’s for	Screens	Beyond the shared screens, they can
Point of Contact	Whoever answers guests day to day	The shared screens + Inbox + Agent Hub (view) + Complimentary Stays	Create and drive inquiries (quote, request payment, reject/decline), verify or reject a guest’s payment (which converts the inquiry), create and update bookings, delete a duplicate entry, check guests in and out, request ID verification and record documents, view ID documents, attach payment proof, quote extensions, flag blacklist entries, manage guest profiles, message guests and draft AI replies - and reveal and hand the door code to the guest (the only role that hands it over, by hand or via the agent rule).
Booking Manager	The reservations lead	The shared screens + Approvals + Issues + Inbox + Agent Hub (view) + Complimentary Stays	Everything the funnel needs: the POC’s inquiry and booking powers (including verifying or rejecting a payment) plus direct and group bookings, historical imports, calendar blocks, verifying and revoking ID checks, approving extensions, deciding approval-queue tasks, requesting reviews. No door-code hand-off.
Guest Manager	Guest relations and difficult calls	The shared screens + Inbox	The only role that cancels bookings and marks no-shows; requests refunds (an Account Manager approves and pays); verifies and revokes ID checks and views the documents; resolves blacklist entries; curates guest profiles; requests reviews; messages guests.
Airbnb Manager	The channel-side operator	The shared screens + Inbox + Complimentary Stays	Runs the funnel for channel guests (inquiries, direct bookings, updates), mirrors external calendar blocks, verifies ID checks, manages static lock codes, generates integrated smart-lock codes (the one role that can), relays codes to the POC, records and escalates damage, attaches payment proof.
Front Desk	The desk downstairs	The shared screens + Inbox + Maintenance	Checks guests in and out, updates bookings, keeps guest contacts current, relays lock codes to the POC, reports maintenance, messages guests.
Co-Host	A trusted helper with light powers	The shared screens + Inbox	Creates inquiries, updates bookings, requests ID verification and reviews, flags blacklist entries, manages guest profiles, messages guests.
Conflict Resolution Manager	Damage claims and disputes	The shared screens + Housekeeping (the damage/claims tab is their surface)	The only role that resolves damage claims; records inspections, creates and escalates damage evidence, resolves blacklist entries, requests reviews.

Money and oversight roles

Role	Who it’s for	Screens	Beyond the shared screens, they can
Account Manager	Finance operations	The shared screens + Approvals + Issues + Inbox + Agent Hub + Complimentary Stays + the finance pages: Payments, Treasury (with the Property bank accounts dialog), Expenses, Payroll, Assets, Period Close, Charges, Payables, Payees, Fees & Taxes, Accounting export; the reports: Property Reports, P&L Report, ROI, Monthly Break-even, Cash Report, Operating Models, Occupancy Report; the partner pages: Owners, Owner Payouts, Investors, Investor Model, Deals, Track Record, Proposals, Launch, Deployment; plus Settings, Feature status, WhatsApp and the property Finance tab	The money role: the only seat that records transactions and approves and pays refunds, and one of three that verify or reject payments (with the Point of Contact and Booking Manager). Also files refunds, records expenses, edits bank accounts, runs the accounting export, approves extensions, decides approval tasks, manages agent rules, and changes workspace settings.
External Accountant	Your bookkeeper - external, read-only	The finance read pages (Payments, Treasury, Expenses, Assets, Period Close, Charges, Payables, Payees, Guest tax), the reports (Property Reports, P&L Report, ROI, Monthly Break-even, Cash Report, Operating Models, Occupancy Report, Complimentary Stays, Report Builder), the partner pages (Owner Portal, Owners, Owner Payouts, Investors and the capital pages), and the property Finance tab	Reads transactions, statements, and the tax rule catalog. Cannot change a rate it audits, record anything, or see the operational screens - no member floor.
Auditor	Compliance / an external reviewer	Audit (with Product usage), Daily Report, Occupancy Report, Complimentary Stays, Report Builder	Reads the workspace activity feed and the reports. Nothing else - no member floor.

Housekeeping and task roles

These are portal-style seats: their screens are the Housekeeping queue and Maintenance (plus the bell and Support), scoped to their work. The first four are designed for task-only seats - no member floor.

Role	Who it’s for	They can
Cleaner	Cleaning staff	See their own assigned tasks, start them, complete them; report maintenance.
Housekeeping Coordinator	The dispatcher	See the whole queue; assign, reassign, prioritize, and update task state; report maintenance; Report Builder. Does not clean and does not inspect.
Inspector	Post-checkout quality control	See the queue; record inspections, clear them, or record damage; report maintenance.
Maintenance	Repairs	See the queue; start and complete tasks; report and resolve maintenance items.
Property Manager	The ops lead over all of it	A bigger seat than the four above: the shared screens (minus Guests) + Approvals + Issues + Agent Hub + Housekeeping + Maintenance. Dispatches and works the whole cleaning queue (including Mark cleaned & ready), records/clears inspections and damage evidence, reports and resolves maintenance, works the Issues list, manages static lock codes, blocks units on the calendar, checks guests in and out, manages agent rules, decides approval tasks.

The cleaner “My jobs” portal

A dedicated cleaner portal route is registered in the permission system but the page itself is not built yet - the Housekeeping queue is the cleaner’s working surface today, narrowed to their own tasks.

Channel duty roles

Four narrow seats so you can grant one channel power without the others. All ride the member floor (the shared screens); none can touch money or codes.

Role	Screens	The one power
Content Manager	The shared screens	Edit property and listing content and photos, and push them to channels.
Availability Manager	The shared screens	Set channel availability, from the calendar’s selection sheet.
Channel Pricing Manager	The shared screens + Price rules	Set channel pricing from the calendar’s selection sheet, and manage price rules.
Channel Setup	The shared screens + Channels + Bookings to Review	Connect and configure a channel - the most trusted channel act, kept apart on purpose.

External portal role

Role	Who it’s for	They see
Investor	A capital partner - external	Investor Portal only, scoped to their own position, plus the bell and Support. No member floor; never money or lock-code powers.

Custom roles

Custom roles can be composed from the same permission palette and page registry. Two hard ceilings apply, enforced at the write boundary, at rest in the database, and again at runtime: a custom role can never hold a role-pinned single-actor capability (the money and door-code verbs in The approval system), and it can never name a permission or page that doesn’t exist in the registry. See Custom roles.

If this page and the app ever disagree

The app wins, and we fix the page. The tables above are read from the same role and page registries the product enforces at runtime - report any mismatch you find.