Roles control what each person on your team can see and do in Turnstile.
A permission is a single action, such as Send quotes or Manage API keys & webhooks. A role is a named set of permissions, such as Sales or Finance. You do not give people permissions directly. You assign them one or more roles, and they get every permission those roles include.
You assign and manage roles on the Team page.
Areas of Turnstile that roles control
Roles control access to three areas:
Quotes: viewing, creating, editing, sending, and approving quotes
Team & Settings: the Team page, roles, and account settings
Developers: API keys and webhooks
Other areas, including invoices, are not controlled by roles yet. Everyone on your team keeps their current access to those areas.
Default roles and the permissions each one includes
Turnstile includes eight default roles. You cannot edit or remove them, but you can copy one as a starting point for a custom role.
Owner
The Owner has full access, including inviting teammates, changing roles, creating custom roles, changing settings, and managing API keys. Only an Owner can give someone else the Owner role or remove it.
Admin
Admins can invite teammates, change roles, create custom roles, change settings, and manage API keys.
Admins cannot set or manage the account Owner.
Finance
The Finance role can view quotes, the Team page, Settings, and API keys.
The Finance role cannot create, edit, or send quotes.
Sales
The Sales role can create, edit, send, and approve quotes.
The Sales role cannot open the Team page or Settings.
Manager
The Manager role can view quotes and approve quotes routed for approval.
The Manager role cannot create, edit, or send quotes.
Developer
The Developer role can view quotes, create and revoke API keys, and manage webhooks.
Analyst
The Analyst role can view quotes, the Team page, Settings, and API keys.
The Analyst role cannot edit anything in the account.
Member
Member is the default role for new invitations.
The Member role can view, create, and edit draft quotes.
The Member role cannot send or approve quotes, and cannot open the Team page or Settings.
Permissions: the actions a role can include
A permission allows one specific action, such as viewing quotes or sending them. Permissions are the building blocks; roles are how you hand them out. Every role, default or custom, is a set of permissions, and a person can do something in Turnstile only if one of their roles includes the permission for it.
Permissions are grouped by area of Turnstile: Quotes, Team & Settings, and Developers. Each group has a view permission plus one or more action permissions. A role with any action permission in a group also gets that group’s view permission, because nobody can act on something they cannot see. For example, a role with Send quotes can always view quotes too.
Quotes permissions
View quotes: See quotes and their line items.
Create quotes: Start new quotes. The Create quote option appears only for roles with this permission.
Edit quotes: Change existing draft quotes.
Send quotes: Send, publish, and retract quotes.
Approve quotes: Approve quotes routed for approval. A role with this permission can be chosen as an approver in approval rules.
Team & Settings permissions
View Team & Settings: See the Team page, roles, and Settings.
Manage Team & Settings: Invite and remove teammates, change roles, create and edit custom roles, change account settings, and create quote approval rules.
Developers permissions
View API keys & webhooks: See API keys and webhook endpoints.
Manage API keys & webhooks: Create and revoke API keys, and create, edit, and delete webhook endpoints.
How permissions combine when someone has more than one role
A person can hold more than one role. They get every permission included in any of their roles. For example, someone with both Sales and Developer roles can send quotes and manage API keys.
What happens when someone does not have a permission
An action the person cannot take appears grayed out. Hovering over it shows: You do not have access. Contact an administrator to grant you access.
A page the person cannot view shows: Your current roles do not include this area.
On a quote, someone who can create or edit drafts but cannot send them sees a note naming the roles that can send.
To change what someone can do, ask a person with the Manage team & settings permission to change their roles.
Note: Role changes can take up to five minutes to apply.
Roles for teammates who joined before roles were introduced
When roles were introduced on November 3, 2026, everyone already on your team was given the Admin role, so nobody lost access. To limit what a teammate can do, change their roles on the Team page. See inviting, removing, and managing users.
The Owner role and how to add one
New Turnstile accounts give the Owner role to the person who signed up. If your account does not have an Owner and you would like one, contact Turnstile Support at help@turnstile.ai.