A role says what a person may do. Record groups say which records they may do it to — both must allow an action. Deleting a role is refused while anyone still holds it; move them first.
OwnerLocked
Full access to everything, including roles and CRM Setup. Cannot be edited or deleted.
2
people
Every moduleAll records, every typePersonal Assistant
Somebody must always be able to repair a permission set
MemberShipped
JY Global staff. Reads and edits the CRM records in their groups; no configuration.
5
people
CRM view · create · editKnowledge HubTo-do ListPersonal AssistantNo CRM SetupNo payment reviewNo user management
CustomerShipped
An external client. Reads the CRM records in their groups and nothing else.
2
people
CRM view onlyOwn profileNo Personal AssistantNo Knowledge Hub
Compliance Officer
Reviews CDD across every client. Cannot change how the CRM is configured.
4
people
CRM view · create · editAll ClientsKnowledge HubPersonal AssistantNo CRM Setup