Does MiOpsAI provide role-based access control?

Yes — MiOpsAI ships with role-based access control (RBAC) on every plan, with five built-in roles, per-feature permission overrides, and granular custom roles available on Agency and Enterprise+ tiers. Every action is logged with user attribution for audit.

Built-in roles (every plan)

• Owner — full administrative access, billing, security settings, plan changes. Typically the founder or CEO.
• Admin — full operational access, user management, integration management. Cannot change billing or transfer ownership.
• Manager — manages assigned tenants and team members, can approve LizziAI autopilot rules within scope, runs reports.
• Member — works within assigned tenants, drafts and sends communications, manages tasks and pipelines.
• Viewer — read-only access for stakeholders, accountants, advisors who need visibility without write capability.

Per-feature permission overrides

1. Email send permission — separate from email read permission.
2. Pipeline modify — view-only vs edit vs delete.
3. Financial data access — gate access to revenue, invoices, and forecast data.
4. AI autopilot configuration — only certain roles can grant LizziAI autonomous action permission.
5. Export permission — control who can pull CSV exports of tenant data.
6. Integration management — gate who can connect/disconnect external systems.

Custom roles (Agency and Enterprise+)

• Build any role from a permission palette — e.g., "Junior Account Manager: edit tasks and contacts on assigned tenants only, no email send, no exports."
• Tenant-scoped roles — "Client Portal User: view-only on Tenant X only, no other tenant visibility."
• Department roles — Marketing, Sales, Customer Success, Finance with appropriate scope each.

SSO and provisioning (Enterprise+)

SAML SSO via Okta, Azure AD, Google Workspace. SCIM auto-provisioning so adding a user to your IDP creates the MiOpsAI account automatically with the right role. Removing access in the IDP revokes MiOpsAI access immediately.

Audit log

Every login, role change, permission grant, data access, and outbound action is logged with user, timestamp, IP address, and outcome. Searchable in admin, exportable via API. All plans include RBAC. Start the trial to configure roles for your team.