Contact and team permissions

Privileges control exactly what someone can do on your account. The same section appears whenever you add or invite a contact, create or invite a team, or edit any of them, so the options below apply to both contacts and teams.

Start from a preset, then review the individual checkboxes before saving. Grant only the access the person needs. Receiving notifications and being allowed to change or pay something are separate permissions.

Presets

• None: clears the selection.
• Technical Staff: a technical and support-oriented set.
• Full Privileges: broad access across the available permissions. Review the resulting checkboxes before using it.
• Accounting: a billing and finance-oriented set.

Permission categories

• Billing: receiving billing notifications, invoices, reminders, and quotes; viewing and paying invoices; placing orders; accepting order contracts; receiving order emails; viewing the balance; adding funds; editing card details; viewing and accepting estimates; and viewing service prices.
• Support: opening, viewing, and closing tickets, receiving email notifications, and viewing all of the organisation’s tickets.
• Misc: account-level controls such as editing the main profile, managing service groups, viewing email history, receiving generic and file-related emails, editing allowed IP access, adding or editing contacts, managing teams, the affiliates section, the cart and product portfolio, and full control over services and domains.
• Department access: the “Disable access to following departments” option blocks specific support departments such as Kiravo Support. This section disables access to the departments you select.

Per-service and per-domain permissions

When Kiravo shows resource-specific blocks below the general permissions, use them to grant access to individual services or domains. The available blocks depend on the resources in your account. An account without domains will not show domain-specific controls.

Review Full control over services and Full control over domains under Misc before relying on a narrow resource selection. These options grant broad access.

For a hosting service, you can allow viewing details and billing info, requesting cancellation, upgrades and downgrades, accessing the control panel and login details, resetting the password, changing the billing cycle, label, or owner, manual renewal, related invoices, and auto-renewal.

For a domain, you can allow viewing details, renewing, managing and registering nameservers, auto-renew, changing the label or owner, related invoices, and syncing domain status. Depending on the TLD, some domains also expose DNS Management, Auth Info / EPP Key, Registrar Lock, Manage DNSSEC, Manage Privacy, and Contact Information.

Save and check access

Use Submit on the add-contact and user-invitation forms. Team forms use Save Changes. When editing an existing contact or team, save the form after reviewing its permissions.

Ask the person to sign in with their own account and check the task you granted, such as viewing invoices or opening a support ticket. If an action is missing, check the relevant permission, department restrictions, and resource selection before granting broader access.

Choosing a billing contact changes the profile used for billing. To let that person pay invoices, also review Allow to view/pay invoices under Billing.