Roles and permissions software for small teams
Roles and permissions software decides who can see and change what. Wrkbase gives every workspace four default roles, lets you build your own from 95 permissions, and adds two-factor sign-in. All of it is on every plan, including the free one.
Control who sees and changes what
Four default roles
Every workspace has four default roles: Boss, HR, Manager and Employee.
Custom roles
Create a role and give it any mix of 95 permissions, alongside the defaults. Custom roles are on every plan, including free.
Own or any
A permission can apply to a person's own records or to everyone's, such as editing your own tasks versus any task. It is enforced on the server, not just hidden in the interface.
Two-factor sign-in
Any account can turn on a code from an authenticator app, and gets 10 single-use recovery codes. It is on every plan.
A record of changes
Every change goes into an append-only audit log: who did what, when, and from which IP address and browser, including AI agent actions.
What it does not do
There is no SSO or SAML sign-in. Access is by password, with two-factor sign-in as an option.
Questions about roles and permissions
More on how data is kept apart and who can reach it is on the security page.
Can I create custom roles in Wrkbase?
Yes. Create a role and give it any mix of 95 permissions, alongside the default Boss, HR, Manager and Employee roles. Custom roles are on every plan, including the free plan for up to 5 people.
Does Wrkbase support two-factor authentication?
Yes. Any account can turn on sign-in with a password plus a code from an authenticator app, and gets 10 single-use recovery codes. It is on every plan.
Does Wrkbase support SSO or SAML?
No. There is no SSO or SAML sign-in. Access is by password, with optional two-factor sign-in.
What does own versus any permission mean?
It is the pattern where a person may act on their own records or on everyone's, for example editing their own tasks versus any task. It is enforced on the server, not just hidden in the interface.
Give each person the access they need.
Free for teams up to 5, no credit card required.