The eight rights
Each person’s access is made of eight rights, in two groups: what they can see, and what they can change. This page lists what each right opens, then shows how to set them and what a missing right looks like.
What they can see
| Right | What it opens |
|---|---|
| Revenue & orders | Revenue, orders (amounts, counts, numbers), average order, purchase rates. |
| Advertising | Ad spend, budgets, real campaign names, what each platform says it brought, conversions sent. |
| Customer data | Emails, names, phone numbers, contacts, AI summaries that identify a person, contact exports, privacy requests. |
| Session replays | Visits, recordings, live visitors, frustration signals, behavior reports, segments, experiments. |
What they can change
| Right | What it opens |
|---|---|
| Store settings | Store settings: recording and consent, exclusions, data retention, alerts, install. |
| Connections | Shopify, Google Ads, ad platforms, conversion destinations, API keys, webhooks. |
| Team | Seeing the team, inviting, changing rights, removing people. |
| Billing | Plan, payment, invoices and usage. Only the owner can give it. |
Some figures need two rights. ROAS divides revenue by ad spend, so it shows only with Advertising and Revenue & orders together.
Step 1: Tick the rights
In Settings > Team, open Invite someone, or click Edit on a member’s row. Pick Custom, then tick the boxes under What they can see (1) and What they can change (2).
Boxes for rights you lack are not shown at all, and “You can only give the rights you have yourself.” appears under them.
Step 2: Choose the stores
Under Stores, pick All stores, including future ones, or Only these stores and tick each store. Then click Send invitation, or Save changes for a member.
A person sees a store if they have All stores, including future ones, or if that store is ticked under Only these stores. A store you add later joins the first kind automatically, and no one else’s. Stores outside a person’s list do not appear in their store picker at all.
Rights apply on each store the person can see. Actions that concern the whole account, such as managing the team, need the right on the whole account: someone limited to some stores gets “The team right on the whole account is required.”
Step 3: Check each person's rights
Back in the Members card, each row lists the rights that person has (1).
What a missing right looks like
A card or figure the person may not see keeps its place and size; its value is replaced by a lock and the word Hidden, with “Ask the account owner for access” (1). What their rights allow stays visible, such as the visitors on your store right now (2). Screens are never removed from the menu, so nothing looks broken. The same word replaces the value in exported files: a hidden amount is written “Hidden”, never “0.00”.
The rights are enforced by Whence’s servers and database, not only by the screen. Removing a right takes effect within 30 seconds.
Rules that keep rights safe
- You can only give rights you have yourself.
- You cannot change or remove someone who has a right you lack: “You cannot change someone who can see more than you.”
- You cannot cancel an invitation that gives more than you have.
- Nobody can change their own rights: “You cannot change your own rights.”
- The owner’s row cannot be changed or removed.
See Roles and invitations for the ready-made roles.