Access architecture & security • Team permissions

How to manage roles, scopes & permissions

Protect sensitive financial accounts, empower guest curators, and equip day-of-show staff with tailored permissions. Understand Venue Family’s surface-based authorization, granular abilities, and the essential distinction between Scope All and Scope Own.

Team architecture

System roles & team hierarchy

Every organization comes pre-configured with 5 battle-tested roles tailored to performing arts and venue management.

Full control

Admin

Complete authority over Stripe bank payouts, subscription billing, venue settings, e-contract templates, and user permission invites.

Operations

Manager

Manages venue listings, responds to rental quotes, schedules calendar events, coordinates staff shifts, and approves production riders.

Front of house

Staff

Runs show-night door operations: Front-of-House Console, live QR ticket scanning, comp ticket generation, and usher coordination.

Production

Tech

Accesses the Tech Dashboard: oversees stage sound, lighting cues, AV inventory, soundchecks, and technical stage riders.

Community & producers

Member / partner

Submits event proposals, creates listed community shows, and connects artist discovery profiles. When paired with Scope "Own", artists manage their specific productions safely.

The scope axis

Organization scope: All vs. own

How Venue Family isolates guest producers from sensitive organization records without sacrificing collaboration.

Organization-Wide

Scope: "All"

Grants apply to the entire organization. A user holding a role with Scope "All" can see, edit, and coordinate events across all spaces and dates in the workspace.

Best for: Permanent venue directors, executive staff, house managers.
Isolated & safe

Scope: "Own"

Narrows every granted ability exclusively to the events that user authored (events.user_id). Even if granted event editing, an own-scoped user can NEVER view other producers’ shows, alter organizational settings, or inspect bank payouts.

Best for: Guest directors, visiting dance companies, independent curators.
Modular interface

The 8 dashboard access surfaces

Venue Family partitions workspace functionality into 8 discrete surfaces. Assign team members only the surfaces they need.

1. Programming

Calendar curation, event intake, director approvals, and scheduling.

2. Tech dashboard

Sound, lighting, stage riders, audio channel lists, and backline gear.

3. Finance dashboard

Stripe payouts, ticket revenues, settlement reports, and refunds.

4. Operations

Shift rosters, 7shifts integration, volunteer call times, and FOH.

5. Marketing

Promotional banners, discovery tagging, social syndication, and ads.

6. Payments

Subscription plans, organization billing invoices, and payment cards.

7. Settings

Venue locations, child rooms, pricing packages, and contract rules.

8. Users

Team invitations, role assignments, scopes, and staff status.

Granular control

Granular permission abilities

Behind the surfaces, atomic abilities gate individual user actions with total precision.

Event authority

events.create • Publish listings

events.edit • Modify dates & pricing

events.delete • Cancel or archive shows

comps.issue • Issue free guest tickets

Staffing & roster

shifts.manage • Schedule & assign staff

shifts.view-pay • View wage rates & costs

shift_types.manage • Configure positions

performers.manage • Tag & link artists

Administration

locations.manage • Edit rooms & rates

finance.manage • Connect Stripe payouts

users.manage • Invite staff & collaborators

roles.manage • Edit role permissions

Collaboration

Inviting guest curators & producers

How to onboard visiting artists or independent festival producers safely in 3 steps.

1

Send email invitation

In Organization Settings → Users, click Invite Member. Enter their email address and select Role: Member or Manager.

2

Set scope to "own"

Select Scope: "Only their own events". This safely sandboxes their view strictly to the shows they produce without accessing organizational records.

3

Collaborate seamlessly

The guest curator logs in, builds their event listing, edits performer line-ups, and tracks ticket sales in real-time.

Audit trail

Audit trails & permission boundaries

Every change to a role or an invitation is recorded, and the roles below set what each person can see and do.

Every role change, invitation and status change is recorded with a timestamp. A person whose scope is "own" cannot give themselves more access, see bank account numbers or change billing settings. The Venue Family team reviews ownership claims and venue takeovers.

Frequently asked questions

Everything you need to know about setting up permissions and inviting collaborators.

What is the difference between Scope All and Scope Own?

Scope "All" applies a user’s permissions across the entire organization (all events, schedules, and venues). Scope "Own" restricts their permissions strictly to the events they created. An own-scoped user cannot view or modify events produced by other team members.

Can guest producers view our venue banking or payout details?

No. Guest producers assigned Scope "Own" have zero access to the Finance dashboard, organization Stripe Connect accounts, or billing subscription invoices. They can only see the ticket sales and payouts directly associated with their specific show.

How do I create a custom role for a specialized position?

In Organization Settings → Roles, Organization Admins can click "Create Custom Role". Select which of the 8 dashboard surfaces to display, toggle exact abilities (such as shifts.manage or comps.issue), and designate the default scope.

Need help configuring team permissions or guest producer access?

Our support team can help you review permission scopes, invite technical staff, and verify role-based access for multi-room venue facilities.