Access Permissions in IZI CRM — Deep Reference
The permissions system in IZI works through roles: create a role with the required permissions → assign the role to a staff member with the clubs where it applies.
Where to configure: Settings → Roles (create roles) → Settings → Users (assign to staff)
Full Access
Section titled “Full Access”Full Access — a special permission in a role that automatically grants all organization and club permissions across all clubs. Required for:
- Creating and deleting clubs
- Managing users and roles
- Access to all financial operations
The organization owner always has Full Access — this cannot be changed.
Club Permissions
Section titled “Club Permissions”Apply only to the clubs selected when assigning the role to a user.
| Permission | What it grants |
|---|---|
| Base Access | Hall, sessions, bookings, clients, player groups, orders, bar orders, shifts, transactions, balances, device list, holds and device commands |
| Equipment | Create, edit, delete, restore devices; binding codes; zone management |
| Remote Access | Open remote access to devices via MeshCentral |
| IZI Boot | View and manage IZI Boot state on devices |
| Screensavers | View, create, edit, delete screensavers and widgets |
| IZI Monitoring | View device monitoring data |
| Warehouse | Stock levels, goods receipt, write-offs, inventory |
| Tariff Write-off | Write off a player’s purchased tariff |
| Tariff Restore | Restore a written-off tariff |
| Catalog | Create, edit, delete products, categories, discounts, promotions, combos, tariffs |
| Schedules | Create, edit, delete schedules |
| Administration | Edit or delete the club |
| IZI Boot Settings | Manage IZI Boot configuration |
| IZI Monitoring Settings | Manage monitoring configuration |
Analytics Permissions
Section titled “Analytics Permissions”Each permission opens a specific report. Analytics permissions do not require Base Access.
| Permission | Report |
|---|---|
| Key Metrics | KPI dashboard |
| Daily Analytics | 24-hour summary |
| Products Report | Product sales |
| Tariff Sales | Tariff sales report |
| Bonuses Report | Bonus balance and operations |
| Sessions Report | Session data |
| Clients Report | Client database and stats |
| Shifts Report | Shift history and summary |
| Suspicious Activity Report | Anomalies and violations |
| Promo Codes Report | Promo code usage |
| Price Simulation | Pricing scenario analysis |
Financial Operations Permissions
Section titled “Financial Operations Permissions”| Permission | What it grants |
|---|---|
| Cash Registers | View, create, edit, archive registers and manage them |
| Game Balance Top-Up | Credit money to a player’s game balance |
| Game Balance Write-off | Deduct money from a player’s game balance |
| Bonus Balance Top-Up | Credit a player’s bonus balance |
| Bonus Balance Write-off | Deduct from a player’s bonus balance |
| Refund | Process refunds to customers |
| Cash Collection | Cash collection, cash-in/cash-out |
| Account Transfer | Transfer between registers, manage transaction categories |
Organization Permissions
Section titled “Organization Permissions”| Permission | What it grants |
|---|---|
| Integrations | Manage payment and POS providers, payment methods |
| Player Groups | Create, edit, delete player groups |
| Transaction Tags | Create, edit, delete tags |
| Campaigns | View, create, edit, delete campaigns |
| Promo Codes | View, create, edit, delete promo codes |
Permission Dependencies
Section titled “Permission Dependencies”When selecting certain permissions, the CRM automatically enables dependent ones:
- Most club permissions require Base Access — CRM enables it automatically
- Catalog automatically enables Schedules and Equipment
- All analytics reports enable general analytics section access
- Promo Codes enable Base Access for the club
- Campaigns enable Player Groups
Role Examples
Section titled “Role Examples”Hall Administrator — works with clients and sessions, no settings access:
- Base Access ✓
- Game Balance Top-Up / Write-off ✓
- Cash Collection ✓
Accountant — analytics only, no operational access:
- Key Metrics ✓
- Shifts Report ✓
- Products Report ✓
- Tariff Sales ✓
- (no Base Access)
Technical Specialist — works with equipment:
- Equipment ✓
- IZI Boot ✓
- IZI Boot Settings ✓
- Remote Access ✓
- (no financial permissions)
Related Sections
Section titled “Related Sections”- Multi-club Setup — how permissions work in a network
- Switch Between Clubs — navigation across multiple clubs
- General Club Settings — Administration permission for editing
Frequently asked questions
What does Base Access include?
Base Access opens the hall, sessions, bookings, clients, player groups, orders, bar orders, shifts, transactions, balances, devices. It is an operational access level — not read-only.
Can I give analytics-only access without hall access?
Yes. Analytics permissions are independent of Base Access. Create a role with only the reports needed — an accountant can see numbers without being able to manage sessions.
How do permissions work when a staff member has multiple roles?
Permissions are additive. If a staff member has two roles, they get the union of all permissions from both roles.
Does the organization owner always have full access?
Yes. The organization owner automatically has Full Access — it cannot be restricted through roles.
What does Full Access in a role mean?
Full Access grants all organization permissions and all club permissions across all clubs — including creating clubs, managing users and roles.
Can I give access to one club in a network and block another?
Yes. When assigning a role to a user, you select which clubs it applies to. One staff member can have different roles in different clubs.