Team members and roles

Settings > Users & Teams (/settings/users) is where you invite, manage, and remove team members and where roles are managed. Only Owners and admins can invite users, change roles, or deactivate accounts.

Inviting

Click + Invite User, enter an email, and choose a role. New invites default to Sales Representative (Fundraiser on the Nonprofit edition). The invitee gets an email with a one-click link to set up their account.

System roles

Tormano seeds nine system roles:

• Owner - everything else, including transfer ownership, delete org, and billing. Created for the user who signed up. Not assignable when inviting. Note "everything else": the Owner does not hold the privacy permissions described in the next entry.
• Privacy Officer - the only role that can use the data-subject request tools: searching and erasing mirrored correspondence by email address, and creating and escalating data-subject exports. It holds nothing else, deliberately - answering privacy requests is a separate job from administering the organization, and every action it takes is written to the audit log. No other role has these permissions, Owner and System Administrator included, so assign this role to someone before you need to answer a request.
• System Administrator - full access to all modules, system settings and user management. Cannot manage billing or transfer ownership.
• Organization Administrator - full access to all modules and system settings, short of ownership transfer and billing.
• Sales Manager - team-level access via the manager hierarchy.
• Sales Representative - access to their own records. (Default invite role.)
• Marketing Manager - full access to campaigns and email templates; read-all on contacts.
• Customer Support Agent - read-all (view-only) on contacts, companies, deals and reports; can create and edit activities; read-only view of integration status. Cannot import, export, delete or change settings.
• Readonly - view-only across the org.

On the Nonprofit edition, several roles are relabeled: Sales Manager → Development Manager, Sales Representative → Fundraiser, Marketing Manager → Communications Manager, and Customer Support Agent → Donor Services Agent.

Custom roles

Beyond the seeded set, you can create your own custom roles with their own permissions - for example a "Fundraising Coordinator" who can edit donations and grants but not deals. Role management lives here under Users & Teams; there is no separate "Roles & Permissions" page.

Removing users

Deactivate keeps a user's historical records (so past activity stays attributed) but blocks future logins. Deactivation can be reversed.

Self-deactivation guard

The system prevents Owners/admins from deactivating themselves to avoid locking the org out. Have another admin make the change instead.