People and roles

Everyone has one role. Riverdesk checks the role on the server for every action. Hiding a button is never the only protection.

The four roles

	Owner	Reservations	Finance	Read only
See every screen	✓	✓	✓	✓
Take, change and cancel bookings; answer requests	✓	✓
Block cabins, stop sales, allotments	✓	✓
Assign cabins; download manifests (with passports)	✓	✓
Record payments, refunds and corrections	✓		✓
Print documents	✓	✓	✓
Change the schedule, rates and channels	✓
People and company settings	✓
Export or erase a guest's data; the Pilot dashboard	✓
Two-step code required	✓		✓

Inviting someone

Settings → People → Invite someone. Enter their email, their name and their role. They sign in with that email to join. An open invitation can be revoked until it is used.

Changing a role or removing someone

On Settings → People, change the role in the list, or press Deactivate. A deactivated person can no longer sign in, and their past actions stay in the audit log under their name. Reactivate brings them back.

Riverdesk always keeps at least one active owner. You cannot demote or deactivate the last one.

Good practice

• One person, one login. Never share a login.
• Give Read only to anyone who only needs to look, for example a sales manager or an accountant.
• Review the list when someone leaves.