Roles and permissions

Compare customer, licensed staff, support, company admin, wholesaler, carrier and platform permissions.

Scope, assignment and verified professional authority apply on every request. This chart explains permissions; it does not grant them.

Customer

Own agency-bound requests. Provide information, return requested forms, follow progress, and request service.

View applications & private documents: Own — File visibility, assignment, recipient and tenant checks apply on every read and download. Parent organization administration alone does not grant customer-file access.
Start / update intake: Own editable requests — Customer editing is limited by workflow stage. Bound applications stay immutable; service or change requests use their own workflow.
Complete supplemental / company forms: Requested forms — A submitted intake or supplemental questionnaire is not itself an executed carrier application. Form definitions and issued responses retain their versions.
Request service / retrieve released documents: Own — Customer files exclude staff-only inbound evidence, internal notes and unreleased quotes. A service request does not make a policy change effective.
Extract and compare document facts: Intake suggestions — AI requires configured processing and consent. Unknown, conflicting and unsupported facts remain unresolved; source excerpts are retained.
Approve requirements / changed documents: No — A current verified license for the risk state and access to the file are required. Changing application facts invalidates prior approval and creates a new package version.
Digitally sign agency application: No — Only the authorized human reviewer may attest to the current package. Administrator status does not supply insurance authority.
Submit to insurer / approve carrier email: To agency only — Current approved evidence, explicit recipient/attachment review, assignment and provider readiness are checked. Submission does not bind coverage.
Select quote / request binding: Own released quote — Only current source-backed released quotes are customer-visible. Selection and a binding request do not establish coverage.
Return carrier decision / policy: No — Actual carrier confirmation and retained policy evidence are required. The portal does not invent insurer acceptance.
Inbox, tasks & client update alerts: Own released updates — Inbound messages create staff review work. Exact scoped addresses route automatically; ambiguous name/address suggestions require administrator confirmation.
Manage email connectors / automations: No — Gmail and Microsoft 365 use read-only OAuth import. Outbound email is a separate provider. Encrypted credentials are never returned to the browser or MCP.
Commission, profitability & AMS review: No — Economics use recorded commissions, receipts and costs. AMS is reviewed import/export unless a supported live adapter is configured.
Assign files & manage staff: No — Invitations, active membership, licensing and assignments are separate controls. Demo view switching grants no production permissions.
Create organizations: No — Only authorized organization administrators manage their hierarchy. No cross-network access is implied.
White-label branding & public forms: Use branding — Agency branding is editable only when authorized by the parent organization. Logos, colors and typography carry into portal and form output.
Personal appearance preferences: Own — Light, system and dark themes, including blue, green, graphite, plum and custom dark background choices, live in profile or portal settings.
MCP read / prepare workflows: Own session — Delegated access is session-bound and revocable. Read-only keys cannot save drafts. Signing, binding, external send and access changes open the authorized human workflow.

Unlicensed staff

Assigned agency files. Prepare answers and documents, coordinate requests, and hand off for licensed review.

View applications & private documents: Assigned — File visibility, assignment, recipient and tenant checks apply on every read and download. Parent organization administration alone does not grant customer-file access.
Start / update intake: Assigned — Customer editing is limited by workflow stage. Bound applications stay immutable; service or change requests use their own workflow.
Complete supplemental / company forms: Prepare — A submitted intake or supplemental questionnaire is not itself an executed carrier application. Form definitions and issued responses retain their versions.
Request service / retrieve released documents: Assigned — Customer files exclude staff-only inbound evidence, internal notes and unreleased quotes. A service request does not make a policy change effective.
Extract and compare document facts: Prepare — AI requires configured processing and consent. Unknown, conflicting and unsupported facts remain unresolved; source excerpts are retained.
Approve requirements / changed documents: No — A current verified license for the risk state and access to the file are required. Changing application facts invalidates prior approval and creates a new package version.
Digitally sign agency application: No — Only the authorized human reviewer may attest to the current package. Administrator status does not supply insurance authority.
Submit to insurer / approve carrier email: Prepare / hand off — Current approved evidence, explicit recipient/attachment review, assignment and provider readiness are checked. Submission does not bind coverage.
Select quote / request binding: No — Only current source-backed released quotes are customer-visible. Selection and a binding request do not establish coverage.
Return carrier decision / policy: No — Actual carrier confirmation and retained policy evidence are required. The portal does not invent insurer acceptance.
Inbox, tasks & client update alerts: Assigned — Inbound messages create staff review work. Exact scoped addresses route automatically; ambiguous name/address suggestions require administrator confirmation.
Manage email connectors / automations: View assigned delivery — Gmail and Microsoft 365 use read-only OAuth import. Outbound email is a separate provider. Encrypted credentials are never returned to the browser or MCP.
Commission, profitability & AMS review: No accounting totals — Economics use recorded commissions, receipts and costs. AMS is reviewed import/export unless a supported live adapter is configured.
Assign files & manage staff: No — Invitations, active membership, licensing and assignments are separate controls. Demo view switching grants no production permissions.
Create organizations: No — Only authorized organization administrators manage their hierarchy. No cross-network access is implied.
White-label branding & public forms: Use branding — Agency branding is editable only when authorized by the parent organization. Logos, colors and typography carry into portal and form output.
Personal appearance preferences: Own — Light, system and dark themes, including blue, green, graphite, plum and custom dark background choices, live in profile or portal settings.
MCP read / prepare workflows: Assigned scope — Delegated access is session-bound and revocable. Read-only keys cannot save drafts. Signing, binding, external send and access changes open the authorized human workflow.

Licensed staff

Assigned agency files + applicable license. Prepare, review, sign, and submit within verified jurisdiction and authority.

View applications & private documents: Assigned — File visibility, assignment, recipient and tenant checks apply on every read and download. Parent organization administration alone does not grant customer-file access.
Start / update intake: Assigned — Customer editing is limited by workflow stage. Bound applications stay immutable; service or change requests use their own workflow.
Complete supplemental / company forms: Prepare & review — A submitted intake or supplemental questionnaire is not itself an executed carrier application. Form definitions and issued responses retain their versions.
Request service / retrieve released documents: Assigned — Customer files exclude staff-only inbound evidence, internal notes and unreleased quotes. A service request does not make a policy change effective.
Extract and compare document facts: Prepare & review — AI requires configured processing and consent. Unknown, conflicting and unsupported facts remain unresolved; source excerpts are retained.
Approve requirements / changed documents: License required — A current verified license for the risk state and access to the file are required. Changing application facts invalidates prior approval and creates a new package version.
Digitally sign agency application: License required — Only the authorized human reviewer may attest to the current package. Administrator status does not supply insurance authority.
Submit to insurer / approve carrier email: License required — Current approved evidence, explicit recipient/attachment review, assignment and provider readiness are checked. Submission does not bind coverage.
Select quote / request binding: Authorized workflow — Only current source-backed released quotes are customer-visible. Selection and a binding request do not establish coverage.
Return carrier decision / policy: Record verified response — Actual carrier confirmation and retained policy evidence are required. The portal does not invent insurer acceptance.
Inbox, tasks & client update alerts: Assigned — Inbound messages create staff review work. Exact scoped addresses route automatically; ambiguous name/address suggestions require administrator confirmation.
Manage email connectors / automations: View assigned delivery — Gmail and Microsoft 365 use read-only OAuth import. Outbound email is a separate provider. Encrypted credentials are never returned to the browser or MCP.
Commission, profitability & AMS review: No accounting totals — Economics use recorded commissions, receipts and costs. AMS is reviewed import/export unless a supported live adapter is configured.
Assign files & manage staff: No — Invitations, active membership, licensing and assignments are separate controls. Demo view switching grants no production permissions.
Create organizations: No — Only authorized organization administrators manage their hierarchy. No cross-network access is implied.
White-label branding & public forms: Use branding — Agency branding is editable only when authorized by the parent organization. Logos, colors and typography carry into portal and form output.
Personal appearance preferences: Own — Light, system and dark themes, including blue, green, graphite, plum and custom dark background choices, live in profile or portal settings.
MCP read / prepare workflows: Assigned scope — Delegated access is session-bound and revocable. Read-only keys cannot save drafts. Signing, binding, external send and access changes open the authorized human workflow.

Company admin

Own company. Manage people, assignments, operations and branding. Licensing is checked separately.

View applications & private documents: Company — File visibility, assignment, recipient and tenant checks apply on every read and download. Parent organization administration alone does not grant customer-file access.
Start / update intake: Company — Customer editing is limited by workflow stage. Bound applications stay immutable; service or change requests use their own workflow.
Complete supplemental / company forms: Manage & prepare — A submitted intake or supplemental questionnaire is not itself an executed carrier application. Form definitions and issued responses retain their versions.
Request service / retrieve released documents: Company — Customer files exclude staff-only inbound evidence, internal notes and unreleased quotes. A service request does not make a policy change effective.
Extract and compare document facts: Prepare & review — AI requires configured processing and consent. Unknown, conflicting and unsupported facts remain unresolved; source excerpts are retained.
Approve requirements / changed documents: License required — A current verified license for the risk state and access to the file are required. Changing application facts invalidates prior approval and creates a new package version.
Digitally sign agency application: License required — Only the authorized human reviewer may attest to the current package. Administrator status does not supply insurance authority.
Submit to insurer / approve carrier email: License required — Current approved evidence, explicit recipient/attachment review, assignment and provider readiness are checked. Submission does not bind coverage.
Select quote / request binding: Authorized workflow — Only current source-backed released quotes are customer-visible. Selection and a binding request do not establish coverage.
Return carrier decision / policy: Record verified response — Actual carrier confirmation and retained policy evidence are required. The portal does not invent insurer acceptance.
Inbox, tasks & client update alerts: Company — Inbound messages create staff review work. Exact scoped addresses route automatically; ambiguous name/address suggestions require administrator confirmation.
Manage email connectors / automations: Company admin — Gmail and Microsoft 365 use read-only OAuth import. Outbound email is a separate provider. Encrypted credentials are never returned to the browser or MCP.
Commission, profitability & AMS review: Company — Economics use recorded commissions, receipts and costs. AMS is reviewed import/export unless a supported live adapter is configured.
Assign files & manage staff: Company — Invitations, active membership, licensing and assignments are separate controls. Demo view switching grants no production permissions.
Create organizations: No — Only authorized organization administrators manage their hierarchy. No cross-network access is implied.
White-label branding & public forms: If enabled — Agency branding is editable only when authorized by the parent organization. Logos, colors and typography carry into portal and form output.
Personal appearance preferences: Own — Light, system and dark themes, including blue, green, graphite, plum and custom dark background choices, live in profile or portal settings.
MCP read / prepare workflows: Company scope — Delegated access is session-bound and revocable. Read-only keys cannot save drafts. Signing, binding, external send and access changes open the authorized human workflow.

Wholesaler

Own network + explicitly shared placements. Manage the agency network and process versioned wholesale handoffs. Operational staff retain their assigned roles.

View applications & private documents: Shared / assigned — File visibility, assignment, recipient and tenant checks apply on every read and download. Parent organization administration alone does not grant customer-file access.
Start / update intake: Own workspace role — Customer editing is limited by workflow stage. Bound applications stay immutable; service or change requests use their own workflow.
Complete supplemental / company forms: Scoped forms — A submitted intake or supplemental questionnaire is not itself an executed carrier application. Form definitions and issued responses retain their versions.
Request service / retrieve released documents: Shared scope — Customer files exclude staff-only inbound evidence, internal notes and unreleased quotes. A service request does not make a policy change effective.
Extract and compare document facts: Workspace role — AI requires configured processing and consent. Unknown, conflicting and unsupported facts remain unresolved; source excerpts are retained.
Approve requirements / changed documents: License required — A current verified license for the risk state and access to the file are required. Changing application facts invalidates prior approval and creates a new package version.
Digitally sign agency application: License + assigned role — Only the authorized human reviewer may attest to the current package. Administrator status does not supply insurance authority.
Submit to insurer / approve carrier email: License + assigned role — Current approved evidence, explicit recipient/attachment review, assignment and provider readiness are checked. Submission does not bind coverage.
Select quote / request binding: Scoped placement — Only current source-backed released quotes are customer-visible. Selection and a binding request do not establish coverage.
Return carrier decision / policy: Scoped placement — Actual carrier confirmation and retained policy evidence are required. The portal does not invent insurer acceptance.
Inbox, tasks & client update alerts: Shared / assigned — Inbound messages create staff review work. Exact scoped addresses route automatically; ambiguous name/address suggestions require administrator confirmation.
Manage email connectors / automations: Own workspace admin — Gmail and Microsoft 365 use read-only OAuth import. Outbound email is a separate provider. Encrypted credentials are never returned to the browser or MCP.
Commission, profitability & AMS review: Own workspace admin — Economics use recorded commissions, receipts and costs. AMS is reviewed import/export unless a supported live adapter is configured.
Assign files & manage staff: Own organization / agencies — Invitations, active membership, licensing and assignments are separate controls. Demo view switching grants no production permissions.
Create organizations: Agencies in network — Only authorized organization administrators manage their hierarchy. No cross-network access is implied.
White-label branding & public forms: Own network — Agency branding is editable only when authorized by the parent organization. Logos, colors and typography carry into portal and form output.
Personal appearance preferences: Own — Light, system and dark themes, including blue, green, graphite, plum and custom dark background choices, live in profile or portal settings.
MCP read / prepare workflows: Explicit workspace role — Delegated access is session-bound and revocable. Read-only keys cannot save drafts. Signing, binding, external send and access changes open the authorized human workflow.

Hub admin

Platform organization administration. Manage wholesalers, organizations, branding authorization and platform administration. This does not create a license or automatic access to client files.

View applications & private documents: Membership required — File visibility, assignment, recipient and tenant checks apply on every read and download. Parent organization administration alone does not grant customer-file access.
Start / update intake: Membership required — Customer editing is limited by workflow stage. Bound applications stay immutable; service or change requests use their own workflow.
Complete supplemental / company forms: Organization forms — A submitted intake or supplemental questionnaire is not itself an executed carrier application. Form definitions and issued responses retain their versions.
Request service / retrieve released documents: Membership required — Customer files exclude staff-only inbound evidence, internal notes and unreleased quotes. A service request does not make a policy change effective.
Extract and compare document facts: Membership required — AI requires configured processing and consent. Unknown, conflicting and unsupported facts remain unresolved; source excerpts are retained.
Approve requirements / changed documents: No platform override — A current verified license for the risk state and access to the file are required. Changing application facts invalidates prior approval and creates a new package version.
Digitally sign agency application: No platform override — Only the authorized human reviewer may attest to the current package. Administrator status does not supply insurance authority.
Submit to insurer / approve carrier email: No platform override — Current approved evidence, explicit recipient/attachment review, assignment and provider readiness are checked. Submission does not bind coverage.
Select quote / request binding: No platform override — Only current source-backed released quotes are customer-visible. Selection and a binding request do not establish coverage.
Return carrier decision / policy: No platform override — Actual carrier confirmation and retained policy evidence are required. The portal does not invent insurer acceptance.
Inbox, tasks & client update alerts: Membership required — Inbound messages create staff review work. Exact scoped addresses route automatically; ambiguous name/address suggestions require administrator confirmation.
Manage email connectors / automations: Membership required — Gmail and Microsoft 365 use read-only OAuth import. Outbound email is a separate provider. Encrypted credentials are never returned to the browser or MCP.
Commission, profitability & AMS review: Membership required — Economics use recorded commissions, receipts and costs. AMS is reviewed import/export unless a supported live adapter is configured.
Assign files & manage staff: Organization hierarchy — Invitations, active membership, licensing and assignments are separate controls. Demo view switching grants no production permissions.
Create organizations: Wholesalers & agencies — Only authorized organization administrators manage their hierarchy. No cross-network access is implied.
White-label branding & public forms: Platform administration — Agency branding is editable only when authorized by the parent organization. Logos, colors and typography carry into portal and form output.
Personal appearance preferences: Own — Light, system and dark themes, including blue, green, graphite, plum and custom dark background choices, live in profile or portal settings.
MCP read / prepare workflows: Organization reads — Delegated access is session-bound and revocable. Read-only keys cannot save drafts. Signing, binding, external send and access changes open the authorized human workflow.

Carrier / underwriter

Submissions addressed to this identity. Read the submitted package and return questions, quotes, declines or policy evidence.

View applications & private documents: Addressed submissions — File visibility, assignment, recipient and tenant checks apply on every read and download. Parent organization administration alone does not grant customer-file access.
Start / update intake: No — Customer editing is limited by workflow stage. Bound applications stay immutable; service or change requests use their own workflow.
Complete supplemental / company forms: No — A submitted intake or supplemental questionnaire is not itself an executed carrier application. Form definitions and issued responses retain their versions.
Request service / retrieve released documents: Submission evidence — Customer files exclude staff-only inbound evidence, internal notes and unreleased quotes. A service request does not make a policy change effective.
Extract and compare document facts: Visible source review — AI requires configured processing and consent. Unknown, conflicting and unsupported facts remain unresolved; source excerpts are retained.
Approve requirements / changed documents: No — A current verified license for the risk state and access to the file are required. Changing application facts invalidates prior approval and creates a new package version.
Digitally sign agency application: No — Only the authorized human reviewer may attest to the current package. Administrator status does not supply insurance authority.
Submit to insurer / approve carrier email: Receive only — Current approved evidence, explicit recipient/attachment review, assignment and provider readiness are checked. Submission does not bind coverage.
Select quote / request binding: Carrier response — Only current source-backed released quotes are customer-visible. Selection and a binding request do not establish coverage.
Return carrier decision / policy: Addressed submission — Actual carrier confirmation and retained policy evidence are required. The portal does not invent insurer acceptance.
Inbox, tasks & client update alerts: Addressed updates — Inbound messages create staff review work. Exact scoped addresses route automatically; ambiguous name/address suggestions require administrator confirmation.
Manage email connectors / automations: No — Gmail and Microsoft 365 use read-only OAuth import. Outbound email is a separate provider. Encrypted credentials are never returned to the browser or MCP.
Commission, profitability & AMS review: No — Economics use recorded commissions, receipts and costs. AMS is reviewed import/export unless a supported live adapter is configured.
Assign files & manage staff: No — Invitations, active membership, licensing and assignments are separate controls. Demo view switching grants no production permissions.
Create organizations: No — Only authorized organization administrators manage their hierarchy. No cross-network access is implied.
White-label branding & public forms: Use supplied branding — Agency branding is editable only when authorized by the parent organization. Logos, colors and typography carry into portal and form output.
Personal appearance preferences: Own — Light, system and dark themes, including blue, green, graphite, plum and custom dark background choices, live in profile or portal settings.
MCP read / prepare workflows: Addressed scope — Delegated access is session-bound and revocable. Read-only keys cannot save drafts. Signing, binding, external send and access changes open the authorized human workflow.

Create your intake form · Start your brokerage workspace