Skip to main content
TalkPilot uses a 4-tier role system to control access to features and data.

Roles

Super-Admin

Full access to everything. Can see all organizations, all agents, and all data.

Dev-Admin

Can create agents and manage phone numbers. Can only see agents they created. Full configuration access on their agents.

Client-Admin

Can edit assigned agents with limited access (greeting, voice, employees, schedule). Cannot create agents or access phone numbers. Can add existing agents by phone number.

Client-Employee

Read-only access to assigned agents. Can add existing agents by phone number. Cannot edit any configuration.

Permission matrix

FeatureSuper-AdminDev-AdminClient-AdminClient-Employee
View all agentsAllOwn onlyAssigned onlyAssigned only
Create agentsYesYesNoNo
Add agent by phoneNoNoYesYes
Edit agent promptYesYesNoNo
Edit agent greetingYesYesYesNo
Edit LLM settingsYesYesNoNo
Edit voice settingsYesYesYesNo
Configure toolsYesYesNoNo
Manage knowledge baseYesYesNoNo
Manage employeesYesYesYesNo
Configure forwardingYesYesYesNo
Edit scheduleYesYesYesNo
View callsYesYesYesYes
Manage calls (done, notes)YesYesYesNo
Delete agentsYesYesNoNo
Phone numbers pageYesYesNoNo
Organizations pageYesYesNoNo
Create organizationsYesYesNoNo
API key managementYesYesYesNo
Trash managementYesYesYesNo

Client-Admin limited access mode

When a Client-Admin opens an agent detail page, they see a simplified view:
  • Visible: Greeting, voice/speech settings, language, employees, forwarding slots, schedule
  • Hidden: System prompt, LLM settings, tools, knowledge base
  • Save button: Shows “Save Greeting” instead of “Save”
This ensures clients can customize their agent’s voice and behavior without modifying the core AI configuration.

Route access

RouteRequired roles
/agenten/newsuper_admin, dev_admin
/telefonnummernsuper_admin, dev_admin
/organisationensuper_admin, dev_admin
All other routesAny authenticated role