Roles & Permissions

For Admins

Understand the role hierarchy and permission system that controls access to your portal.

Last updated: 2/10/2026

AtriumCMS uses a role-based access control system. Each user is assigned a role that determines what they can see and do on your portal.

Role Hierarchy

Roles are organized in a hierarchy. Higher roles inherit all permissions of lower roles.

RoleLevelDescription
Client AdminHighestFull control over the portal — settings, users, all content
Board MemberHighBoard-level content access, governance features
Committee MemberMediumAccess to committee-specific content and features
EditorMediumCan create and manage content (posts, events, notices)
OwnerStandardProperty owner with access to owner-level content
TenantStandardResident access to tenant-level content
UserBasicBasic authenticated access

What Each Role Can Do

Client Admin

Full access to everything:

  • All admin settings (branding, SEO, site settings)
  • User management (create, edit, deactivate users)
  • All content management (create, edit, delete any content)
  • Board and committee management
  • Invitation management
  • All content visibility levels

Board Member

Everything a regular member can do, plus:

  • View board-level (visibility 9) content
  • Access governance features (board management, certifications)
  • View board-specific sections of the admin dashboard

Committee Member

Everything a regular member can do, plus:

  • View committee-level (visibility 4) content
  • Access to committee-specific features

Editor

Content creation and management:

  • Create, edit, and delete posts, events, notices, and resources
  • Manage documents and categories
  • Cannot access admin settings or user management

Owner

Standard property owner access:

  • View owner-level (visibility 3) content like financial reports
  • All tenant-level access

Tenant

Standard resident access:

  • View tenant-level (visibility 2) content
  • Access the portal dashboard, documents, events, and public content

User

Basic authenticated access:

  • View member-level (visibility 1) content
  • Access public (visibility 0) content

Assigning Roles

Roles are assigned when creating a user or can be changed at any time:

Navigate to the user

Go to Admin > Members > Users and find the user.

Edit the user

Click the user to open their profile editor.

Change the role

Select a new role from the role dropdown.

Save

Click Save to apply the change. The new permissions take effect immediately.

⚠️
Changing roles affects access immediately

When you change a user's role, their access changes right away. If they're currently logged in, they'll see the new permissions on their next page load.

Permission Matrix

ActionAdminBoardCommitteeEditorOwnerTenant
View public contentYesYesYesYesYesYes
View member contentYesYesYesYesYesYes
View owner contentYesYesNoNoYesNo
View board contentYesYesNoNoNoNo
Create/edit contentYesNoNoYesNoNo
Manage usersYesNoNoNoNoNo
Admin settingsYesNoNoNoNoNo
Board governanceYesYesNoNoNoNo

Common Role Assignments

PersonRecommended Role
HOA president / board member managing the portalClient Admin
Property managerClient Admin or Editor
Board of directors membersBoard Member
Committee chairs and membersCommittee Member
Property owners (not on the board)Owner
Renters / tenantsTenant
Part-time staff helping with contentEditor

Best Practices

  • Minimize admins — Only grant Client Admin to people who truly need full access. 1-2 admins is typical.
  • Use Board Member for board members — Don't make every board member an admin unless they need settings access.
  • Distinguish owners from tenants — If you have financial content restricted to owners, make sure the role assignments are correct.
  • Audit regularly — Review role assignments when board membership changes, especially after elections.
  • Use Editor for content helpers — If someone helps with posts and events but shouldn't manage users or settings, Editor is the right role.

Next Steps