Standard roles
tikento provides five standard roles for organizing teamwork. Each role defines a set of permissions -- atomic rights to perform actions in the system.
Owner
Full control over the organization. Each organization must have exactly one Owner.
Key capabilities:
- All permissions without exception
- Billing and plan management
- Transfer of the Owner role to another member
- Organization deletion
- Mandatory two-factor authentication (TOTP)
Admin (Administrator)
Full access to organization features, except billing management.
Key capabilities:
- Creating and managing events
- Inviting and removing team members
- Assigning roles (except Owner)
- Configuring payment gateways
- Access to all reports
- Managing registration forms
- Mandatory two-factor authentication (TOTP)
Manager
Event and registration management. The primary working role for staff who create and run events.
Key capabilities:
- Creating and editing events
- Managing registrations (viewing, confirming, canceling)
- Configuring registration forms
- Managing tickets and promo codes
- Participant check-in
- Manual broadcasts to participants
- Viewing basic event statistics
Limitations:
- No access to financial reports
- Cannot invite team members
- Cannot configure payment gateways
Finance
Access to payment information and financial reports. A role for accounting and finance staff.
Key capabilities:
- Viewing all payments and transactions
- Initiating refunds
- Financial reports and export
- Viewing participant lists (read-only)
- Viewing plan settings (read-only)
Limitations:
- Cannot create or edit events
- Cannot manage registrations
- Cannot invite team members
Support
Data viewing and participant check-in. A role for volunteers and on-site event helpers.
Key capabilities:
- Viewing participant lists
- Participant check-in (marking arrival)
- Viewing event information
- Working in offline mode (check-in without internet)
Limitations:
- Read-only (except check-in)
- No access to payment information
- No access to settings
Permissions summary table
| Capability | Owner | Admin | Manager | Finance | Support |
|---|---|---|---|---|---|
| Billing management | Yes | -- | -- | -- | -- |
| Team invitations | Yes | Yes | -- | -- | -- |
| Role assignment | Yes | Yes | -- | -- | -- |
| Creating events | Yes | Yes | Yes | -- | -- |
| Editing events | Yes | Yes | Yes | -- | -- |
| Managing registrations | Yes | Yes | Yes | -- | -- |
| Form configuration | Yes | Yes | Yes | -- | -- |
| Broadcasts to participants | Yes | Yes | Yes | -- | -- |
| Check-in | Yes | Yes | Yes | -- | Yes |
| Viewing payments | Yes | Yes | -- | Yes | -- |
| Refunds | Yes | Yes | -- | Yes | -- |
| Financial reports | Yes | Yes | -- | Yes | -- |
| Viewing participants | Yes | Yes | Yes | Yes | Yes |
| Payment gateway settings | Yes | Yes | -- | -- | -- |
| Organization deletion | Yes | -- | -- | -- | -- |
Assigning and changing roles
Assigning a role
- Go to Settings -> Team.
- Find the team member in the list.
- Click on their name or the edit icon.
- In the Roles section, select one or more roles.
- Click Save.
Role changes take effect immediately. The permissions cache updates within 60 seconds.
Transferring the Owner role
- Go to Settings -> Team.
- Find the member you want to transfer ownership to.
- Click Assign as owner.
- Confirm the action via 2FA (TOTP code).
- After the transfer, you will automatically receive the Admin role.
Transferring Owner is irreversible through the interface -- to reverse it, the new Owner must assign you back.
Two-factor authentication
The Owner and Admin roles require mandatory two-factor authentication (TOTP per RFC 6238). When assigning one of these roles to a user who does not have 2FA configured, the system will prompt them to set it up at their next login.
Without 2FA enabled, a user cannot perform actions requiring Owner or Admin privileges.