- Permissions — atomic capabilities (e.g.
accounts:write,orders:cancel_any). - Roles — named bundles of permissions. Some are built in (e.g.
owner_admin,risk_manager); you can create custom roles. - Staff — operators who belong to your firm and hold one or more roles.
- Overrides — per-staff grants or revokes that adjust a staff member’s effective permissions without changing their roles.
In the terminal
- Open Staff.
- Invite someone with a starting role.
- Open their row to change roles, grant extra permissions, or suspend access.

