VoiceHire uses a two-tier permission system: organization-level settings control what areas of the app a user can access, and job-level roles control what they can do within a specific job.
Tier 1: Organization Role
Every user has exactly one organization role.
| Role | Access Level |
|---|
| Super Admin | Full access to everything. Bypasses all permission checks. Can manage all users. |
| Admin | Full access to app features and all Manage settings. Can manage Members but not other Admins or Super Admins. |
| Member | Access defined by capabilities, access scope, and job role assignments. |
Super Admins and Admins have full, unrestricted access to all jobs and all Manage settings (except Billing, which is Super Admin only).
Tier 2: Member Configuration
For users with the Member role, three additional settings shape their access.
Access Scope
| Scope | Job Visibility |
|---|
| Global | Can see all jobs. Read-only on jobs they are not assigned to; full job-role access on assigned jobs. |
| Assigned | Can only see jobs they are explicitly added to. |
Capabilities
Capabilities grant access to specific app sections. All capabilities default to off for new Members.
| Capability | Section Unlocked |
|---|
| Can Create Jobs | Ability to create new job postings |
| Can View Reports | Reports section |
| Can Manage Question Library | Manage > Question Sets |
| Can Manage Candidates | Candidates and Talent Pools sections |
Route Access Reference
| Route | Required Access |
|---|
/dashboard | Any authenticated user |
/inbox | Any authenticated user |
/jobs | Any authenticated user (filtered by access scope) |
/jobs/new/setup | Admin, Super Admin, or Capability: Can Create Jobs |
/calendar | Any authenticated user |
/candidates | Capability: Can Manage Candidates |
/talent-pools | Capability: Can Manage Candidates |
/reports | Capability: Can View Reports |
/manage/profile | Admin or Super Admin |
/manage/users | Admin or Super Admin |
/manage/job-roles | Admin or Super Admin |
/manage/forms | Admin or Super Admin |
/manage/career-page | Admin or Super Admin |
/manage/integrations | Admin or Super Admin |
/manage/email-templates | Admin or Super Admin |
/manage/ai-instructions | Admin or Super Admin |
/manage/custom-fields | Admin or Super Admin |
/manage/billing | Super Admin only |
/manage/clients | Recruitment agency organizations only |
/manage/question-sets | Capability: Can Manage Question Library |
/jobs/:id/setup | Job permission: Edit Job |
/jobs/:id/bulk-schedule | Job permission: Schedule Interviews |
/jobs/:id/find-candidates | Capability: Can Manage Candidates |
Tier 2: Job Role Permissions
When a Member is added to a job's team, they are assigned a job role. The job role determines what they can do within that job. These permissions do not affect access to any other area of the app.
Job Management
| Permission | What It Allows |
|---|
| View Job Details | See the job's full details and configuration |
| Edit Job | Modify job content, settings, stages, AI configuration, application form, and team |
| Publish Job | Publish or unpublish the job |
| Delete Job | Permanently delete the job |
Candidate Pipeline (200–204)
| Permission | What It Allows |
|---|
| View All Candidates | See all candidates in the pipeline |
| View Candidate Profile | Open individual candidate profiles |
| View Resume | Download and view resumes |
| Move Candidates | Advance candidates through stages |
| Reject Candidates | Mark candidates as rejected |
Interviews (300–303)
| Permission | What It Allows |
|---|
| Schedule Interviews | Create interviews for candidates |
| Cancel Interviews | Cancel scheduled interviews |
| Submit Feedback | Submit interview evaluations |
| View Other Feedback | See feedback from other interviewers |
Communication (400)
| Permission | What It Allows |
|---|
| Send Emails | Send emails to candidates from within the job |
Collaboration (500–501)
| Permission | What It Allows |
|---|
| View Comments | Read discussion comments on applications |
| Leave Comments | Post comments on applications |
Data & Reporting
| Permission | What It Allows |
|---|
| View Hire Details | See hire date, start date, and offer details |
How Authorization Works
- Is the user a Super Admin or Admin? → Full access, no further checks.
- Is the user a Member?
- Check capability flags for route access (reports, candidates, question sets).
- Check access scope to determine which jobs are visible.
- Check job role permissions for actions within a specific job.