Users & Roles

Invite teammates, assign roles, manage access, and turn on Multi-factor Authentication.

6 articles

Creating custom roles

Custom roles let you mix permissions to fit your team's structure. Available on Propel+ (3 max), Middle Market (4 max), and Custom (negotiated). Build by picking individual permission flags. Users on a deleted role need to be reassigned first.

Default roles and what each can do

SALT ships system-defined roles (Manager, User) plus higher-level access types (Admin and Owner). Pick Manager for senior staff, User for standard agents. Custom roles with custom permission combinations are available on Propel+ and above.

Inviting a user to your agency

Send an email invitation from your users settings. The invitee clicks the link, sets up their account, and gains access at the role you specified. Invitations expire in 2 weeks; resend any time.

Leaving or removing a user

Removing a user takes them off the agency and frees their seat. Submissions they owned have their assignment cleared (you'll see them as unassigned). For temporary suspension, disable sign-in instead of removing.

Resetting a forgotten password

Click "forgot password" from sign-in, enter your email, and SALT sends a reset link. The link is valid for 6 hours. After resetting, you'll need your second factor (Multi-factor Authentication) too — password reset doesn't bypass MFA.

Setting up Multi-factor Authentication

Multi-factor Authentication (MFA) adds a second verification step to your sign-in. SALT supports authenticator apps as the primary factor and SMS as a backup. You'll get 10 backup codes — save them somewhere safe before you need them.