Security

Security in Chatterfy means properly assigned access rights plus monitoring actions through the log. The broader an employee’s permissions, the more data and sections they can see. This article is not

Security in Chatterfy means properly assigned access rights plus monitoring actions through the log. The broader an employee’s permissions, the more data and sections they can see.

This article is not about product settings, but a set of recommendations. Read it before granting someone Admin or Owner.

Main rule

Give an employee the minimum necessary access for their tasks. Do not give Admin to someone who only needs a role in one Space. Do not give access to all Spaces if the person works with only one project.

---



What is important to control

Company-level roles ( User Roles) — Owner / Admin provide almost full control.

Access to specific Spaces — who works with which bots and chats.

Access to Tracker — who sees advertising campaigns and their analytics.

---



Which roles to grant carefully

Do not grant these unless necessary:

Owner — only the company’s primary owner. One per business.

Admin — provides access to billing and users. Suitable only for a technical administrator.

Manager within a Space — provides access to bot and flow settings within that Space. Enough for a project lead.

What users with Owner or Admin see

All bots, all dialogs, all statistics, all advertising campaigns, and billing. Assign this only to people who truly need this level of access.

---



Basic recommendations

These rules help make access management more secure:

Grant the minimum necessary role.

Do not open access to all Spaces without a reason — Spaces — Workspaces are designed specifically to isolate teams.

Limit access to Tracker to only those who work with advertising.

Regularly review the list of users and their roles in Users — company users.

When an employee leaves — deactivate them immediately. Do not leave it “for later”.

---



What to monitor

All important actions are recorded in the log — Logs — company activity log. What you should check regularly:

Invitations for new users — who invited whom.

Role changes — who increased or decreased whose access level.

Deletions — users, bots, Spaces. Especially if something disappeared unexpectedly.

Creation of new bots — especially if you have many operators with permissions.

---



Related

User Roles

When to refer to this article You are adding a new employee and choosing a role for them It is unclear why one user sees Spaces and another does not You need to raise or lower the access level of an e

Users — company users

The Users section is a table of all company employees. Here you can see each person's role, which Spaces they have access to, and when they last signed in. Available only to Owner and Admin. Operator

Spaces — Workspaces

If you have one project and one team, you usually don’t need to configure Spaces separately: the default space is enough. When you have several business areas, create a separate Space for each. When y

Logs — company activity log

The Logs section — every significant change: inviting a user, changing a role, creating a bot — is recorded with the author and time. Access to the section is limited to the company's Owner and Admin.