ADMIN

Create account

Sets up the user with a one-time temporary password they'll be prompted to change on first login.

First name

Last name

Phone

City / State

Date of birth

Affiliate code

The short code that powers their recruiting link (`/r/<code>`). Keep it short + uppercase.

Role preset

Agent

Submits deals, sees own hierarchy and earnings.

Team Leader

Same as Agent, plus sees their team's performance.

View-only across all teams + team-leader overrides. Can't see company finances or submit deals.

Finance Admin

Can access the Payouts / CSV uploads area only. No access to agent data, teams, or company finances.

Master Admin (view)

View-only master admin — can see everything including company finances + impersonate users, but can't make changes.

Admin

Full control. Creates accounts, uploads CSVs, sees everything, changes anything.

Starting tier

Use this to grandfather in experienced closers at a higher starting rate. Tier recalculates every month based on actual production.

Customize permissions

Defaults are set by the role preset above. Tick to override.

Expand

Submit deals

Counts on the leaderboard and in commissions.

See all teams

Visibility into every org, not just their own downline.

See company finances

Rival Corp's overrides and payout totals.

Upload payroll CSVs

Access to the Payouts area + ISP confirmation uploads.

Create new accounts

Invite/onboard users and set their role.

Make changes in admin

Activate/pause/separate users, other write actions.

Checked = allowed · unchecked = denied. Only changes that differ from the role default are saved as overrides.

Activate immediately

Skip "pending ISP credentials" — they can submit deals right away.

Upline (recruiter)

For non-sales roles (VP, Finance Admin), leave as top level.

On creation

We generate a 12-character temp password and show it to you once.
Account starts inactive — they can log in and recruit, but not submit deals until you mark them active.
They'll be prompted to change the temp password on first login (handler wires with Supabase Auth).