Restrict access to cost prices: setting up roles and permissions

As soon as several people create quotes, help customers or complete work orders, you will want to restrict access to cost prices. Not because you do not trust your team, but because not everyone needs to see your margins and pricing structure to do their job well.

The practical approach is simple: give employees access to the areas and actions that belong to their role. That way, an installer can complete a work order and a salesperson can create a quote, without sensitive pricing information being unnecessarily widely available.

Why should you restrict access to cost prices?

A salesperson may need your selling price to create a quote. Your cost price and margin are different. That information shows exactly how much room there is in a product or configuration. It does not need to be visible by default to everyone who works with customers.

The opposite is not practical either. If you give nobody permissions out of caution, everything has to go through you. A colleague cannot send a quote, complete a work order or help a customer without asking for approval first. You become the bottleneck.

So with roles and permissions, you are not choosing between fully open and fully closed. You decide what each role needs to work independently.

In Klantly, you set permissions for each area, such as quotes, invoices, work orders, customers, appointments and reports. Within those areas, you also decide which actions someone can perform: view, create, edit, delete, send or export. Buttons and menu items that someone does not have permission for are not shown.

What permissions does each employee really need?

Do not start with every possible checkbox. Start with a role's day-to-day work. What information does someone need to see? What do they need to create or change? And what should remain with you, administration or a manager?

A practical basic setup often looks like this:

• Installer: sees their own work orders and the customer details needed on site. They log hours and materials, add photos and let the customer sign. Cost prices, margins and detailed financial reports are usually not needed for this work.
• Office administrator: manages customer details, schedules appointments, handles incoming messages and creates quotes or invoices according to your process. Only give permission to send documents if that employee genuinely needs to do so.
• Salesperson: sees the customer information, appointments and quotes needed during the sales process. They can create and follow up on quotes, but do not automatically need access to internal cost prices or margin reports.
• Administration or owner: manages invoices, reports and sensitive pricing information. This role may also edit price rules or export data, if that is part of the job.

These are not fixed rules. In a small business, one person may have several roles. The goal is not to make roles complicated, but to prevent access from accidentally being much broader than necessary.

How do you set up roles and permissions without blocking your team?

First, create roles that fit your own process. Think installer, office administration, sales and accounting. Then assign employees to a role. If one colleague temporarily needs more access, you can make an exception for that individual user.

Then work from broad to specific. First grant access to the areas someone uses every day. Then decide what that person can do within each area. Someone who only prepares quotes does not necessarily need permission to send them. Someone who completes work orders does not need to be able to delete invoices.

Ask yourself three questions for every permission:

1. Does this employee need it to do their job properly today?
2. What goes wrong if they cannot do it?
3. What is the risk if this information or action is available to everyone?

This helps you avoid two familiar problems: an installer who cannot see the customer's address when they need to travel there, or a temporary worker who can access all financial data.

How does restricting access to margins work in practice?

Imagine you run a sun shading business with two installers, an office administrator and a salesperson. The salesperson creates quotes and needs to see which configuration the customer chooses and the selling price that goes with it. The office administrator schedules site surveys and sends documents. The installers complete their work on site.

Alongside the selling price, you record the cost price in your price rules. This lets you see internally what margin a configuration delivers. These cost prices are not visible to the customer, nor to colleagues who have not been given permission to see them.

The salesperson can then create quotes independently without needing to look at the margin. The installer opens the work order on their phone, sees what needs to be done and records hours, materials and photos. The office administrator manages the customer and the schedule. You, or whoever is responsible for pricing, keeps access to the price rules, cost prices and margin reports.

This keeps information available to the person who needs to manage it, while your team does not have to come to you for every routine action. If you also want to record customer information properly for each contact, a central CRM for customer details and communication helps everyone work from the same history with the right permissions.

What can roles and permissions not solve?

Permissions limit unnecessary access. They do not replace clear agreements, careful onboarding or trust in your team. Anyone allowed to see information on their screen can, in theory, still copy or share it.

So make agreements about who changes prices, who may give discounts and where internal notes belong. Also review your roles when someone changes position, joins temporarily or leaves the business. When someone leaves, you close one account instead of checking individual passwords or shared files.

Also pay attention to the difference between restricting customer details and making the job impossible. A colleague who needs to help a customer will often need the history of quotes, appointments and conversations. Managing customer information centrally is exactly what helps make a handover run smoothly. So restrict sensitive data deliberately, not blindly.

Finally, keep your price management in good order. Permissions do not prevent an incorrect cost price from being entered. Managing prices centrally, checking changes and being able to restore earlier versions also reduces the risk of mistakes in quotes.

Want to see how you can set up roles, permissions and pricing information without slowing your team down? Start your trial and discover what Klantly could mean for your business.