Protecting your customer data is non-negotiable. MrCAPI uses strict Role-Based Access Control (RBAC) to ensure everyone on your team sees exactly what they need—and nothing they shouldn't.
1. Understanding System Roles
MrCAPI features 4 distinct role levels:
- SUPER_ADMIN: Reserved for top-level platform operators.
- ORG_ADMIN: Workspace Owner. Full access to billing, team invitations, system settings, and analytics.
- ORG_MANAGER: Team Leads. Can view all team leads, reassign records, edit pipelines, and monitor agent performance.
- ORG_AGENT: Sales Representatives. Restricted view—agents can only view and update leads specifically assigned to them.
2. Tenant Isolation Guardrails
Behind the scenes, every single query executed by MrCAPI is strictly bounded by your unique organizationId. This server-side security layer guarantees that team members can never access data belonging to another account or client organization.
💡 Pro Tip: Assign your team leads the ORG_MANAGER role rather than ORG_ADMIN. This gives them all the pipeline tools they need without exposing sensitive billing and credit card details.