Skip to content
  • There are no suggestions because the search field is empty.

A Guide to Roles, Groups and Privileges

Who can do what, who sees whom, and who can open which content. Roles, groups, organizations and privileges explained.

How access works in Showell

Everyone in your Workspace has their own user account. What each person can do and see comes from four building blocks:

  • Role: what someone can do. Every user has exactly one role: Admin, Member or a custom role.
  • Groups: who belongs together. You use groups to give content privileges, send notifications and compare analytics.
  • Organization: which company someone is part of, such as a dealer or partner. An organization has (optionally) its own brand and, together with a custom role, keeps people within their own organization.
  • Privileges: which content someone can open or edit. You set them per folder or file, for groups, organizations or single users.

Guide - 01-how-access-works

Roles and privileges always work together: the role decides what a person can do, and privileges decide on which content. On top of that, every file, folder, presentation and Share has an owner.

 


 

Roles

Admin

Admins have full control of the Workspace. They can:

  • View, edit, upload and remove all content
  • View, edit and remove Shares from any user
  • Manage users, roles, groups, organizations and content privileges
  • See all analytics and send notifications
  • Brand the Workspace and manage integrations and add-ons

Admins keep this workspace-wide access, even when they belong to an organization. Typically, marketing and sales leadership, or whoever runs the Workspace, are Admins.


Member

Member is the default role for new users. Members can:

  • Find, view, present and share the content they have access to
  • Upload their own materials to My Files and create Presentations
  • Create Shares, invite collaborators, and work on Shares where they are a collaborator
  • Manage content in folders where they have Edit privileges, once file Edit mode is turned on for all users in General preferences

Typically, sales reps, service teams and dealers are Members.


Custom role

A custom role is a reusable set of permissions you build yourself. It starts from Member and gives a user more, or less, without making them a full Admin.

Guide - 02-roles-scale

For example:

  • An analytics manager who follows all results, without being an Admin
  • A content manager who looks after all content and brand assets
  • A dealer manager who only sees the people and analytics of their own organization, and can notify them
  • A user whose My Files is read-only, or who cannot sign in at all

User management and branding always stay with Admins. You create and assign custom roles in the Showell App for Web, under Admin > Custom Roles, and they apply in every Showell App. For every option and all the steps, see Manage Roles.

 


 

Groups and organizations

You manage both in the Showell App for Web, under Admin > Groups & Organizations.


Groups

A group collects users by whatever fits your company: team, product line, country, or internal versus external. Use groups to:

  • Give content privileges to many people at once
  • Send notifications to everyone in a group
  • Compare activity in Group analytics

A user can belong to as many groups as you need.


Organizations

An organization is a special kind of group for a company or unit that should have its own space in your Workspace, such as each dealer, distributor, partner or subsidiary.

  • One per user: each user belongs to one organization at most. Your Workspace can have as many organizations as you need.
  • Works like a group: you can give an organization content privileges, and send it notifications.
  • Brand: give an organization its own brand if you like, and its members see that brand, also in the Digital Sales Rooms they share.
  • Invitations: invite people into an organization, and they join it as soon as they accept.
  • Boundaries, with a custom role: give members a custom role with organization options, and they stay within their own organization:
    • Users: they only see the people in their own organization ("View Org Users")
    • Analytics: they see their own organization's analytics, including Share analytics ("Read Org Analytics")
    • Notifications: they can notify the people in their own organization ("Notify Org Users")

Without such a role, members of an organization see and are seen like everyone else. Users who are not in any organization keep working as before, see the FAQ below.

For all the steps, see Groups & Organizations: Setup Guide.

 


 

Privileges

Privileges decide who can open or manage which content. You set them on every folder, subfolder or file, in Edit mode, under the item's access settings:

  • All workspace users: what everyone in the Workspace gets: View, Edit or No access.
  • Groups, organizations and users: exceptions on top of that, for example View for the Sales group, View for one dealer's organization, or Edit for the Management group.

Edit privileges let someone add and organize content in the Showell App for Web, once file Edit mode is turned on for all users in General preferences. A custom role can narrow privileges further, for example to read-only, or lift someone above them with a "Manage all" option.

For all the steps, see Set User/Group Privileges to your Contents.

 



Ownership

Owner is not a role. It tells you who an item belongs to.

  • Whoever uploads a file, creates a folder or makes a presentation becomes its owner.
  • Whoever creates a Share (Digital Sales Room) owns it. Owners can add collaborators, hand over ownership, and give collaborators access to files from their My Files.

Read more in Share Collaboration and Ownership.

 


 

An interactive example

Try it yourself: Flip a few switches and click through the tabs to see how the setup changes.

Halora is a fictional energy company with its own sales team. Switch on what fits your company, and see how Halora sets up roles, groups, organizations, privileges and licenses.
The role decides what someone can do. Privileges decide which folders they can open.
This is Halora with dealers, the starting point of the example.
How Halora builds it, step by step
Orgs and Groups
Why Halora does it this way
  • Organizations
  • None needed: everyone works for Halora.
  • One organization for each dealer: Sonnkamp and Lowland Volt. Each is its own company, with its own brand in Showell and in the Digital Sales Rooms they share.
  • Halora's own team gets one too. With the dealer roles in step 2, dealers then only see their own colleagues and Emma.
  • Emma looks after the dealers, so she stays outside any organization.
  • Groups
  • None needed yet: everyone can open everything.
  • All Employees: all of Halora.
  • Dealers: every dealer user.
  • Channel Team: Emma, who looks after the dealers.
  • Sales DACH and Sales Benelux: one per region.
  • Folders open to these groups in step 3. One person can be in several groups.
  • Folders open to these groups in step 3. One person can be in several groups.
  • Licenses
  • Everyone who signs in needs a license, dealers too.
  • Everyone who signs in needs a license.
  • Madison left, so her license is turned off. She can no longer sign in, her analytics, My Files and presentations stay, and the license is free for someone new.
Halora teamNo organization
Halora teamNo organization
HaloraOrg
Brand: Workspace default
Elias Solvik
Head of Sales
All Employees
Nina Petrovic
Sales Manager DACH
Sales DACHAll EmployeesAll EmployeesSales DACH
Samuel Gray
Junior Sales Representative
Sales BeneluxAll EmployeesAll EmployeesSales Benelux
Daniel Lee
Product Marketing Manager, Energy Storage
All Employees
Madison Hall
Former Sales Representative
License off
Emma Stone
Channel Manager Europe
All EmployeesChannel Team
No organizationSeen by every dealer
Emma Stone
Channel Manager Europe
All EmployeesChannel Team
Sonnkamp (Dealer)Org
 Brand: Sonnkamp
Helena Schmidt
Managing Director
Dealers
Aiden Patel
Sales Consultant
Dealers
Lowland Volt (Dealer)Org
 Brand: Lowland Volt
Malik Shah
Sales Advisor
Dealers
4 people · 4 licenses in use
5 people · 4 licenses in use
8 people · 8 licenses in use
9 people · 8 licenses in use
Organization: one per personGroup: as many as needed
Roles
Why Halora does it this way
  • Every person has exactly one role. It decides what they can do. A custom role starts from Member and gives someone more, or less, without making them an Admin.
  • Elias runs the Workspace, so he is an Admin. Everyone else starts as a Member.
  • The dealers are Members for now, so Aiden can still see Malik, and everyone else. An organization alone hides no one: a custom role does that.
  • Dealer staff get External Sales, so they only see their own colleagues and Emma. Helena runs Sonnkamp, so she gets External Manager: she also follows Sonnkamp's results and can notify her team.
  • Nina and Emma get Manager, to follow all results without becoming Admins.
  • Nina gets Manager, to follow all results without becoming an Admin.
  • Daniel gets Content Manager, so he looks after all content without being an Admin.
AdminBuilt-in
Full control: all content, users, branding and settings.
WhoElias Solvik
MemberBuilt-in
The default role. Opens and shares the content their privileges allow.
WhoNina PetrovicSamuel GrayDaniel LeeMadison HallEmma StoneHelena SchmidtAiden PatelMalik Shah
ManagerCustom role
Member, plus all analytics, and can notify anyone.
Options: Read all Analytics, View all Groups and their Members, Notify anyone and see every Notification
WhoNina PetrovicEmma Stone
Content ManagerCustom role
Manages all content and brand assets, whatever the privileges. Also sees all analytics.
Options: Manage all Workspace Files, Manage all App Resources, Read all Analytics
WhoDaniel Lee
External ManagerCustom role
External Sales, plus their own company's analytics, and can notify their own people.
Options: Read Org Analytics, Notify Org Users
WhoHelena Schmidt
External SalesCustom role
Opens content read-only, and only sees people from their own company and people without an organization.
Options: Read Workspace Files, View Org Users and Users without an Org Group
WhoAiden PatelMalik Shah
Folders
Why Halora does it this way
  • Every folder is View for all workspace users. With only their own team in the Workspace, that is all Halora needs.
  • Most folders are View for all workspace users. Each region folder starts at No access and opens to its own region group only.
  • Every top-level folder starts at No access. Then Halora opens it to the right groups and organizations. So Malik never lands in Sonnkamp's folder, or in Solar, which Lowland Volt does not sell.
  • Each region folder opens to its own region group only.
  • The Channel Team gets Edit on the dealer folders. That needs the workspace setting Enable File Edit Mode for: All Users.
  • Daniel needs no Edit privileges: his Content Manager role covers all content.
Workspace setting Enable File Edit Mode for: Admins (the default). Edit privileges for others only work with All Users.
Workspace setting Enable File Edit Mode for: Admins (the default). Edit privileges for others only work with All Users.
Workspace setting Enable File Edit Mode for: All Users, so the Channel Team's Edit privilege works.
Solutions
All workspace usersView
All workspace usersNo accessAll EmployeesViewSonnkamp (Dealer) OrgViewLowland Volt (Dealer) OrgView
Dealers get this folder only. Each product line below decides for itself.
Solar
All workspace usersView
All workspace usersNo accessAll EmployeesViewSonnkamp (Dealer) OrgView
Energy Storage
All workspace usersView
All workspace usersNo accessAll EmployeesViewSonnkamp (Dealer) OrgViewLowland Volt (Dealer) OrgView
E-Mobility
All workspace usersView
All workspace usersNo accessAll EmployeesViewSonnkamp (Dealer) OrgViewLowland Volt (Dealer) OrgView
Wind
All workspace usersView
All workspace usersNo accessAll EmployeesView
Sales Toolkit
All workspace usersView
All workspace usersNo accessAll EmployeesView
DACH
All workspace usersNo accessSales DACHView
Benelux
All workspace usersNo accessSales BeneluxView
Company
All workspace usersView
All workspace usersNo accessAll EmployeesViewDealersView
Sonnkamp
All workspace usersNo accessSonnkamp (Dealer) OrgViewChannel TeamView
All workspace usersNo accessSonnkamp (Dealer) OrgViewChannel TeamEdit
Lowland Volt
All workspace usersNo accessLowland Volt (Dealer) OrgViewChannel TeamView
All workspace usersNo accessLowland Volt (Dealer) OrgViewChannel TeamEdit
Who sees what
  • What each person can open, who they see in Showell, and which analytics they get.
PersonSolarSales ToolkitDACHSonnkamp folderPeople they seeAnalytics
Elias Solvik
Admin
EditEditEditEditEveryoneAll
Nina Petrovic
Member
Manager
ViewViewView–EveryoneOwn SharesAll
Samuel Gray
Member
ViewView––EveryoneOwn Shares
Daniel Lee
Member
Content Manager
ViewEditViewEdit–Edit–EditEveryoneOwn SharesAll
Madison Hall
Member
––––Cannot sign in–
Emma Stone
Member
Manager
ViewView–ViewEditEveryoneOwn SharesAll
Helena Schmidt
Member
External Manager
View––ViewEveryoneSonnkamp + EmmaOwn SharesSonnkamp
Aiden Patel
Member
External Sales
View––ViewEveryoneSonnkamp + EmmaOwn Shares
Malik Shah
Member
External Sales
––––EveryoneLowland Volt + EmmaOwn Shares
Elias is an Admin, so he can open and edit everything. Everyone else gets View or Edit from privileges.
Elias is an Admin, so he can open and edit everything. Daniel's Content Manager role does the same for content. Everyone else gets View or Edit from privileges.
Planning a structure of your own? See Plan your Content Structure.
This is an example to learn from, not the only way to set things up. Want to know more, or setting up something more complex? Contact your CSM at Showell, or Showell Support.
Signing in with SSO? Showell can give users their role from their SSO group. See Single Sign-On (SSO): Setup Guide.

 

 

💡 FAQ

Can someone manage content without being an Admin?
Yes, in two ways. Add them to a group with Edit privileges on the right folders, and turn on file Edit mode for all users in General preferences. Or give them a custom role with, for example, Manage all Workspace Files. See Manage Roles.

Do roles also apply in the Windows, iOS and Android apps?
Yes. You create and assign roles in the Showell App for Web, and they apply wherever the user signs in. Admin sections themselves are only in the Showell App for Web.

Can a user belong to more than one organization?
No. A user belongs to one organization at most, but can be in any number of groups, at the same time.

What happens to users who are not in any organization?

  • They keep working as before.
  • Other users can still see them, unless a custom role limits those users to their own organization.
  • A user without an organization whose custom role is set to 'View only yourself' sees only themselves, or also other users without an organization if their role includes that option.
  • Organization analytics (part of Group analytics) do not include them, because their activity is not linked to an organization.

I moved a user to another organization. Why do their analytics still show the old one?
Ask the user to sign out and back in. From then on, their activity counts towards the new organization.

Which brand does a member of an organization see?
Their own choice comes first: the brand they picked in My settings > Preferences. If they did not pick one, or chose No preference, they see their organization's brand. Without either, they see the Workspace default.