W
WallJobs
/Documentation
Back to Home
Docs/Workspace

Permissions

Configure role-based access control. Define what each team member can see and do within your workspaces.

Overview

WallJobs AI uses role-based access control (RBAC) to manage what users can see and do. Permissions are granted through roles at both organization and workspace levels, providing flexible control over your recruiting operations.

Key principles:

  • Least Privilege - Users get only the access they need
  • Role-Based - Permissions assigned through predefined roles
  • Hierarchical - Organization roles cascade to workspaces
  • Auditable - All access and actions are logged

Permission Model

Permissions flow from organization to workspace:

Organization-Level Permissions

Control access to organization-wide resources:

  • Billing and subscription management
  • Member invitations and management
  • Workspace creation and deletion
  • Organization settings and security
  • Credit allocation and monitoring

Workspace-Level Permissions

Control access within specific workspaces:

  • Contact viewing and editing
  • Search execution
  • Shortlist management
  • Sequence creation and execution
  • Workspace settings and templates
Note
Organization admins automatically have admin access to all workspaces. Regular members must be explicitly granted workspace access.

Feature Permissions

Different roles have access to different features:

Search

PermissionViewerRecruiterAdmin
View search resultsYesYesYes
Execute searches-YesYes
Save searches-YesYes
Delete saved searches-Own onlyYes

Contacts

PermissionViewerRecruiterAdmin
View contactsYesYesYes
Create contacts-YesYes
Edit contacts-YesYes
Delete contacts--Yes
Enrich contacts-YesYes
Export contacts-YesYes

Shortlists & Sequences

PermissionViewerRecruiterAdmin
View shortlistsYesYesYes
Create/manage shortlists-YesYes
View sequencesYesYesYes
Create/manage sequences-YesYes
Delete sequences-Own onlyYes

Data Visibility

Beyond permissions, visibility rules control what data users can see:

  • Workspace Isolation - Users only see data from workspaces they have access to.
  • Contact Privacy - Email and phone numbers can be restricted to admins only (configurable).
  • Activity Attribution - All actions show who performed them.
Privacy Mode
Enable "Privacy Mode" in workspace settings to hide contact details (emails, phones) from non-admin users. Useful for protecting candidate privacy.

Custom Roles (Enterprise)

Enterprise customers can create custom roles with granular permissions:

  1. Go to Settings → Organization → Roles
  2. Click Create Custom Role
  3. Name the role and add a description
  4. Select individual permissions from the list
  5. Save the role

Custom roles can combine any permissions, allowing you to create roles like:

  • Sourcer - Can search and add to shortlist, but not send sequences
  • Hiring Manager - Can view shortlists and notes, but not edit contacts
  • Data Analyst - Can export data and view reports, but not take actions
Note
Custom roles are an Enterprise feature. Contact sales to learn more about Enterprise plans and pricing.

Audit Logs

Track all permission-related activities in the audit log:

  • Member additions and removals
  • Role changes
  • Workspace access grants and revocations
  • Login attempts (successful and failed)
  • Sensitive data access (contact details, exports)

Accessing Audit Logs

  1. Go to Settings → Organization → Audit Log
  2. Filter by date, user, action type, or resource
  3. Click any entry to see full details
  4. Export logs for compliance or analysis
Retention
Audit logs are retained for 90 days on standard plans, 1 year on Professional, and indefinitely on Enterprise.