Enterprise
Know who can do what, and who did what.
Roles that match real jobs, an activity log across every module, and service accounts for integrations.
Why it matters
Everyone has the same access because setting up roles felt like too much work. An integration runs under the owner's personal login. When a client's record changes unexpectedly, nobody can say who did it, and when an auditor asks who can see pay or security settings, the honest answer is everyone.
Audit trail and access in detail
-
Roles for real jobs
Give each account only the access its work needs.
- CRM Auditor (read-only), Technician, Manager, Administrator
- View, manage, admin and audit-view permissions
- HR pay and security administration kept separate
-
All Activity
Everyone's activity across modules, for the people you allow.
- Filters by person, action, record and date
- "Who can see All Activity" in Settings → Access
- Others see only their own activity
-
Service accounts
Automation gets its own identity.
- CRM Service Account (automation) role
- Hidden from staff pickers and team lists
- Existing records keep their assignment
Questions
Does a general viewer see everyone's activity?
No. Without audit-view or administrative permission, a person sees only their own activity.
Does the activity log show pay details to everyone?
No. Pay-related information stays subject to HR pay permissions, so general CRM access does not open pay details.
What should we do when someone leaves?
Suspend their sign-in as its own step. Archiving a client or setting an employee to terminated does not by itself stop them signing in.
More about Enterprise
- Sign-in security
Decide how each role signs in, help people enrol, and stop password guessing before it gets anywhere.
- Enterprise overview
See Enterprise running on your own data.
Every module runs on CRM-NextGen Cloud: we set it up and run it for you. Beta members get the first invites and hear pricing first.