Build your own access profile and end someone's sessions

The seven built-in roles cover most teams. When one does not fit — a buyer who raises purchase orders but never approves them, say — build a profile: a named set of permissions you give to as many people as need it.

Create one. On Settings → Team & Roles, under Permission profiles, choose New profile, or Duplicate beside a built-in role to start from it. Name it, tick what it may do, and save. The built-in roles stay as they are; they are shown read-only so you can copy them.

Give it to people. Choose Members beside the profile and tick who holds it, or pick the profile from the menu beside a person. A profile replaces that person's role permissions; choose Role default to go back. Owners and Admins are never on a profile, and no profile can manage the team itself, so a profile can never be used to grant more access.

Change it. Editing a profile changes it for everyone who holds it, so Skuvelo names how many people before you save ("Change Buyer for 2 members?"). It applies from their next click, and the server refuses anything the profile no longer allows — hiding a button is never the only guard.

Limit where, too. A profile says what someone can do. Limit access says where: which locations, channels, suppliers, brands or categories. See Limit a team member to one warehouse or channel.

End someone's sessions. Choose Sessions beside the person to see each device they are signed in on and when it was last used. End signs out one device; End all signs them out everywhere and also disconnects any AI assistant they connected to this workspace. Their next request is refused and they have to sign in again, and reconnect their AI assistant. Only an Owner can end an Owner's sessions, and you end your own by signing out.

Every profile change, assignment and ended session is recorded in the activity log.