# CRM user permissions: how to add an employee and set access rights

How to add an employee to your CRM: a personal login, rights by project and funnel stage, hidden client numbers and call reception — video and setup steps.

Section: Getting started · Updated: 2026-11-01 · http://my.lptracker.ru/land/lk/faq/?a=add-user-and-access-rights&lang=en

> **In short:** CRM user permissions are the set of rights that decide what each employee can see and do in your account: which sections they open, whose leads they work with and at which funnel stages, whether they can delete and export the database, and where their calls go. They're set in the “Users” section, where everyone gets their own login. To add an employee, open “Leads” → “Users”, click “+ Add user”, fill in the “Profile”, tick the rights on the “Access rights” tab and click “Save”.

When the whole team signs in to the account with one password and CRM user permissions aren't separated, any manager sees the entire client base and can export it. An employee who has left still knows the password. And in a dispute over “whose client is this”, you can't tell who actually handled the deal.

The “Users” section solves this. Access rights are an employee's set of permissions: which sections of the account they see, whose leads they work with and what they can do with them. Each employee has their own login and password, each lead has its own assignee, and the login log and activity history show who signed in to the account and who was on the line. Rights are set up exactly for the task: a manager sees only their own leads and only at their funnel stages, the head of sales sees everyone, and a marketer sees analytics and advertising. A client's number can be hidden — everywhere at once: in the CRM, in exports, in call details and in notifications. The employee sees only the last four digits and can still call, but can't take the base with the numbers. When a person leaves, you delete their user — the others don't need to change their passwords. The database itself is stored on the platform's own servers.

Watch the five-minute video, and below you'll find a detailed setup of all the rights.

[Video: CRM user permissions: how to add an employee and set access rights](http://my.lptracker.ru/land/n/multic/faq_media.php?f=2026-11/add-user-and-access-rights-en-ded970.mp4)
- 0:03 CRM user permissions
- 0:23 User list
- 0:34 New employee
- 0:49 Payment
- 1:02 Call reception
- 1:15 SIP saves money
- 1:33 General settings
- 1:47 Hidden number
- 2:03 Sections
- 2:20 Permissions
- 2:34 Recordings and SMS
- 2:49 Funnel stages
- 3:04 Stage window
- 3:17 Copying rights
- 3:31 Saving
- 3:43 Groups and line
- 3:57 Password and leaving
- 4:10 Client case
- 4:26 Summary

## Why give each employee their own CRM login

- **Sales department.** A manager works only with their own leads, without the right to delete or export the database. Clients don't leave together with the employee, and there are fewer “whose client” disputes.
- **Head of sales.** Sees the leads of all managers, passes them between employees and listens to call recordings in the lead feed. Can add new managers on their own — without the business owner.
- **A funnel split between people.** A first-line manager sees leads only at the first stages, and a contracts specialist only at theirs. Everyone works with their own part of the funnel and doesn't get lost in other people's cards.
- **Call center and operators.** They take calls on the computer via SIP — it's free, while forwarding to a mobile costs $0.0165 per minute. The client's number is hidden, and CRM settings are unavailable.
- **Marketer.** Sees analytics, widgets, call tracking and autofunnels, but doesn't touch leads and deals.

> A real estate agency in Yekaterinburg with eight managers. Before: everyone worked under two shared logins. A manager who left exported the database, and nobody ever found out who had deleted several deals. What we did: a personal login for everyone; viewing other people's leads, deleting and exporting — only for the head of sales; client numbers hidden from managers; the mortgage broker got access only to the “Mortgage approval” stage. Result: in six months, not a single export and not a single lost deal, and a “whose client” dispute is settled in a minute — by the assignee in the card.

## Where to manage users and permissions

Open the “Leads” → “Users” menu (or “Settings” → “Users”). The list shows everyone who signs in to the account: name and login, SIP status, position, when the person last signed in (the “Last seen” column), groups and the “In calls” toggle. The main account — the one who registered the account — is always first and marked with a green stripe. Its rights can't be restricted.

The “Project / All” switch shows the users of the current project or of the whole account. A project is a separate business line or website in the account with its own sales funnel. Search looks up users by name and login, and the filter by groups.

Clicking a row or the ⚙ gear opens the user card on the right. It has two tabs: “Profile” (sign-in, call reception, general settings) and “Access rights” (rights in each project).

![CRM user list and employee card](http://my.lptracker.ru/land/n/multic/faq_media.php?f=2026-11/add-user-and-access-rights-1-en-1cd34e.webp)

> The plan price is charged for each user per day — on the main plans, from $0.133 (“CRM system”, about $3.99 per month) to $0.60 (“All Inclusive + Training”). Before creating a user, the account shows the “Add a user?” window: how many days the paid plan period will be shortened by. If the plan's user limit is reached, the “Switch to the next plan?” window appears.

## How to add a user to your CRM: step by step

1. **Open a new card** — In “Users”, click “+ Add user”.
2. **Fill in the profile** — “Name”, the ending of the “Login”, “Password”, “Mobile phone” and “Email”. The account number at the start of the login is already filled in, for example “12345_anna”.
3. **Choose call reception** — In the “Call reception” block, click the “Reception type” you need.
4. **Check the general settings** — Almost everything is on for a new user. Turn off what they don't need.
5. **Grant access rights** — On the “Access rights” tab, choose a project and tick the sections and rights. Without at least one right, the account won't create the user: you'll see the hint “Select at least one access right”.
6. **Save** — Click “Save” and confirm that the paid period will be shortened if the account asks. Don't close the card before that: the “Discard changes?” question only covers groups and access rights, and changes to the name without “Save” will be lost.
7. **Hand over the login** — Give the employee the full login with the account number and the password. Or open their card and click “Send access by email”.

## Employee profile: login, password and notifications

- “Login” — for an employee, it starts with the account number and an underscore. This part can't be erased; you type only the ending. The employee signs in with the full login.
- “Password” — required for a new user. For an existing one, leave the field empty to keep the current password, or enter a new one and save.
- “Mobile phone” — required for everyone. The number mask adapts to the country. Calls with “mobile” reception and SMS task reminders go to this number.
- “Email” — required. Below it is the “Send access by email” button: the account creates a new password and sends the login and password to the saved email. The old password stops working.
- “Telegram” and “MAX for notifications” — where the autofunnel sends the employee alerts about leads. Without them, the alerts won't reach the employee. The bot from the link above the field will tell you the user id in MAX.
- “Position” — shown in the user list.
- “Teams” — telephony teams that the inbound call scheme distributes calls to. Choose “— add team —” in the list; you can add several.
- “Timezone” — the employee sees and sets task dates in it. If it isn't set, Moscow time (MSK) is used.
- “Groups” — departments for the list filter. Start typing a name: suggestions appear, and a new group is created on save.
- “Start date” — when the user was created, read-only.
- “Change photo” — the photo is adjusted in the “User photo” window and saved right away, without the “Save” button.

![Employee profile in the CRM: login and sign-in details](http://my.lptracker.ru/land/n/multic/faq_media.php?f=2026-11/add-user-and-access-rights-2-en-11dc1a.webp)

## Call reception: SIP, mobile, SIM or your own PBX

“Reception type” decides where the employee's calls go:

- “SIP” — to a softphone on the computer or an app on the smartphone, over the internet. Click “Generate password”: the SIP login, SIP password and SIP server appear with copy buttons. “Download SIP client” opens the page of a free app — create an account in it with these details.
- “Mobile” — forwarding to the cell phone from the “Mobile phone” field. Convenient for those who work on the road.
- “SIM” — to the service's SIM card, if one is connected for the employee. Without it, the button is gray.
- “External SIP” — the call goes to your own PBX, to the employee's number or login in it. You need your own telephony connected: “Settings” → “Own telephony” (see the article [PBX CRM integration](http://my.lptracker.ru/land/lk/faq/?a=own-pbx&format=md&lang=en) for details).

SIP is cheaper. An incoming call to SIP is free, while reception on a mobile is forwarding, and it costs $0.0165 per minute within Russia.

The “In calls” toggle in the list turns the employee on or off for taking calls right away, without “Save” — for a lunch break or a vacation. The “SIP” column shows whether the app is online: “Disconnected (!)” means calls won't reach the employee. On a plan without telephony, the block is gray: “Your plan does not allow calls, so call reception and SIP are unavailable.”

![Setting up an employee's call reception](http://my.lptracker.ru/land/n/multic/faq_media.php?f=2026-11/add-user-and-access-rights-3-en-48c730.webp)

## General settings: what an employee can do across the account

The toggles in the “Profile” apply to the whole account, not to a single project:

- “Can edit own settings” — open their own card and change the photo.
- “Can see other users” — without it, the employee sees only themselves in the list.
- “Can create/edit other users” — the “+ Add user” and “Groups” buttons, other people's cards and the “In calls” toggles. Give it to the head of sales if they add managers themselves.
- “Can create projects” and “Can edit/delete projects”.
- “Access to the balance section” — balance, payments and plans.
- “Access to the referral program” — the partner program.
- “Access to the settings section” — account settings: the inbound call scheme, website markup, email, SMS.
- “Raise the contact card on incoming calls” — when a call comes in, the client card opens by itself.
- “Access to user activity” — the “Employee activity history” page: who was on the line and when.
- “Hide the client number from the user” — the number is hidden everywhere: in the CRM, in exports, in call details and in notifications. The employee sees only the last four digits but can still call.

A new user has everything on except editing projects and hiding the number. The main account's rights can't be turned off: “The main account has all rights — they cannot be turned off.”

![General employee permissions and hiding the client number](http://my.lptracker.ru/land/n/multic/faq_media.php?f=2026-11/add-user-and-access-rights-4-en-3af064.webp)

## Project access rights: sections and actions

The “Access rights” tab sets rights in each project separately. At the top is the “Project” list: choose the project you're setting up. Projects with unsaved changes are marked with a “•” dot. Each block header has a counter of enabled rights, for example “5/14”, and the “Select all” button.

The “Access to sections” block sets which sections the employee sees in this project: “Users”, “Analytics”, “Telephony”, “Leads”, “Deals”, “Contacts”, “Autofunnel”, “Calendar / tasks”, “Funnel”, “Funnel settings”, “CRM settings”, “Widgets”, “Call tracking”, “Visitor identification”. Without the right, the “Access denied” screen appears instead of the section.

The “Permissions” block sets what the employee can do:

- “Sees leads/deals/chats of other users” — turn it off, and the manager will see only their own clients.
- “Can pass leads/deals/tasks to other users” — change the assignee.
- “Sees call recordings in the lead feed” — listen to calls in the card.
- “Sees hidden tasks of other users”.
- “May skip the reason when changing a stage date” — without it, a comment is required when moving a date.
- Deletion: “Can delete leads / deals”, “Can delete contacts”, “Can delete missed calls”, “Can clear statistics”.
- Import and export: “Can import leads”, “Can import deals”, “Can export leads / deals”.
- “Forbid sending SMS” — works the other way round: when the toggle is on, the employee can't send SMS.

![Employee access rights in a CRM project](http://my.lptracker.ru/land/n/multic/faq_media.php?f=2026-11/add-user-and-access-rights-5-en-1b52e5.webp)

## How to show a sales rep leads only at their funnel stages

A funnel stage is a step in working with a client, for example “New lead”, “Meeting”, “Contract”. The stages themselves are created separately — see [CRM pipeline stages](http://my.lptracker.ru/land/lk/faq/?a=crm-funnel-steps&format=md&lang=en). You can show an employee leads only at their stages and allow them to move leads only where they're supposed to go.

1. **Open the setting** — On the “Access rights” tab, in the “Permissions” block, click the last row, “Can see leads on all stages” → “Configure”. The “Funnel stage” window opens with the project name.
2. **Choose where the employee sees leads** — In the first “— add stage —” list, under the hint “Select the funnel stages on which the user’s leads will be shown”, choose stages one by one. Each one appears as a tag, and the × on a tag removes the stage. If the list is empty, leads are visible at all stages.
3. **Choose where they can move leads** — In the second list, under the hint “Select the funnel stages the user can move leads to”, add stages the same way.
4. **Click “Done”** — The row will show a summary, for example “Sees leads on 3 stages · can move to 2 stages”.
5. **Save the card** — With the “Save” button at the bottom. Without it, the selection won't be recorded.

Each project has its own stages. For another project, choose it in the “Project” list and set up the window again: the “Apply these rights to all projects” checkbox doesn't carry stages over. If there's no “Can see leads on all stages” row, the stage settings for this project didn't come through. A new user always has this row.

Example: at a car dealership, a loan specialist sees leads only at the “Loan approval” stage and can move them to “Car handover” or “Bank refusal”. Other leads don't distract them.

![Employee leads only at selected funnel stages](http://my.lptracker.ru/land/n/multic/faq_media.php?f=2026-11/add-user-and-access-rights-6-en-6f1791.webp)

## Copy permissions from a colleague and apply them to all projects

- “Copy rights from a user” — choose a colleague in the “— choose a user —” list and click “Copy”. The rights are filled into the form: check them and click “Save”. Funnel stages are carried over only within the same projects. If the colleague isn't in the list, switch to “All” at the top.
- “Apply these rights to all projects” — a checkbox, if you have several projects. On save, the rights of the current project are written to all projects.

It's convenient to set up one employee for a role and copy their rights to every newcomer.

> After access rights are saved, the employee is signed out of the account — they need to sign in again, and then the new rights take effect. If you change your own access rights, you'll have to sign in again yourself. Warn the employee in advance.

## Groups, teams and deleting an employee

- **Groups** — the “Groups” button above the list. Create departments, for example “Sales” and “Service”, and filter the list by them. Deleting a group doesn't delete users.
- **Teams** — the “Teams” field in the profile. A team is chosen in the inbound call scheme instead of individual employees — that's how [automatic call distribution between managers](http://my.lptracker.ru/land/lk/faq/?a=inbound-scheme-staff&format=md&lang=en) works.
- **Deleting** — the “Delete” button at the bottom of the card. The employee loses access to the account; deletion takes up to a minute.
- **Your own settings** — click your avatar in the left menu and choose “User settings”.
- **Main account** — its card opens with the gear. It has no “Access rights” tab, and the login is an email.
- **Sign-in and control** — you can allow sign-in only from the office and view the login log on the “Login history” and “Activity history” pages — see the article [how to protect customer data from employees](http://my.lptracker.ru/land/lk/faq/?a=staff-security&format=md&lang=en).

## Frequently asked questions

### How much does it cost to add a user to a CRM?
The plan is charged for each user per day: on the main plans, from $0.133 (“CRM system”, about $3.99 per month) to $0.60 (“All Inclusive + Training”). Before creating the user, the account shows how many days the paid period will be shortened by.

### How do I make a sales rep see only their own clients?
On the “Access rights” tab, turn off “Sees leads/deals/chats of other users”. To make them see leads only at their funnel stages, click “Configure” in the “Can see leads on all stages” row.

### Why was the employee signed out after their rights changed?
It's not an error. That's how new access rights are applied: after they're saved, the employee needs to sign in again.

### Why isn't the new employee in the user list?
In “Project” mode, only users with rights in the current project are shown. Switch to “All” or check the project in the account header.

### Why can't an employee add a user?
They have “Can create/edit other users” turned off, so they don't have the “+ Add user” and “Groups” buttons. The main account can turn it on.

### Why isn't an employee receiving calls?
If the “Call reception” block is gray, your plan has no telephony: calls to employees are available on plans with telephony. If the “SIP” column says “Disconnected (!)”, the softphone is offline. Also check the “In calls” toggle in the list.

**Read also:** [How to protect customer data from employees and unauthorized logins](http://my.lptracker.ru/land/lk/faq/?a=staff-security&format=md&lang=en), [Automatic call distribution between managers: queue and bot](http://my.lptracker.ru/land/lk/faq/?a=inbound-scheme-staff&format=md&lang=en), [CRM pricing plans: which one to choose and how to switch](http://my.lptracker.ru/land/lk/faq/?a=tariffs&format=md&lang=en)