Who can do what: roles and permissions

Every company has one owner; other people join as Admin or Member through an invitation. Job costs and Managerial Finance are separate permissions granted by the owner, not part of a role.

Company settings and team: owners and admins can change regional settings, invite people and revoke invitations. Only the owner can delete the company or manage the subscription and billing (subscribe, change plan, payment methods, invoices, cancellation); admins and members see the plan status but can't change it.

Estimates, proposals and supplier quote requests: every member of the company can create and edit them and create jobs. Deleting a proposal is limited to owners and admins.

Field records: owners and admins can record daily logs on any job that isn't cancelled; members only on jobs they are assigned to. Only owners and admins manage job stages and verify completion.

Job costs: recording, changing or deleting actual costs, and posting field hours as labor costs, needs Can manage job costs. The owner has it and can grant it to an admin or member in Account → Team. Recording a daily log or hours never grants it.

Managerial Finance: off until turned on. Only the owner, and people the owner grants specific finance permissions (admins included), can see or record finance records. Job-cost permission and finance permissions are independent.

Client updates and reports: only owners and admins can create, review, publish or share them; members don't see drafts.

Verify: Account → Team lists each person and whether they can manage job costs. The server checks every permission; a hidden button is never the only protection.