Managed Roles

WeGive ships six managed roles that map to common job functions. Each role grants a curated set of permissions across the dashboard. Managed roles are maintained by WeGive and cannot be edited — they’re marked with a Managed badge in the Roles & Permissions viewer.

Throughout this page, Manage means the role can view, create, edit, and delete in that area (plus any special actions like refund or send), while View means read-only access.

Admin

Full access to everything — all ~158 permissions. Admins can manage every area of the dashboard, including the things no other managed role can touch: team management (inviting and assigning members), billing, and roles.

Assign Admin sparingly — to organization owners and leads who genuinely need unrestricted access.

Finance

For finance and operations staff. Finance can manage:

• Transactions, pledges, and soft credits
• Payouts and reconciliation (including exports)
• Funds and designation lists
• Pledge templates
• Billing (WeGive subscription and invoices)
• Reporting — including data exports and scheduled exports
• Payment processor settings

Finance can view supporters, campaigns, events, forms, and the audit log, but cannot edit them. Finance does not have access to integrations, developer tools, or team management.

Marketing

The broadest non-admin role, for marketing and fundraising teams. Marketing can manage:

• Campaigns, fundraisers, events, and checkouts
• Forms, P2P templates, impact stories, and impact numbers
• Pledge templates
• Messages (including sending broadcasts), journeys, and communication lists
• Conversations, email settings, phone numbers, RSS feeds, and email health
• Tags and automation rules (including applying tags to supporters)
• Notes
• Reporting — including data exports and scheduled exports

Marketing can view supporters and funds. It does not include financial management (transactions, payouts, billing), integrations, or team management.

Developer

For technical staff. Developer can manage:

• Integrations — including configuration, sync, and credentials
• API tokens and the installation / embed snippet
• Donor portal configuration
• Data imports
• Company types, custom fields, files, and redirects

Developer can view supporters, the audit log, and the Roles & Permissions page. It deliberately excludes billing and finance — a developer can wire up integrations without seeing financial data.

Customer Success

For support staff who work directly with supporters. Customer Success can manage:

• Supporters
• Notes
• Conversations (the two-way inbox)

It can also apply tags to supporters (tagging someone during a support interaction) and view transactions, messages, journeys, communication lists, events, forms, campaigns, and the tag catalog.

Note

Applying a tag to a supporter only requires the apply capability plus permission to view supporters — it’s intentionally separate from editing supporter records or editing the tag catalog itself.

Read-only

For stakeholders who need visibility without the ability to change anything. Read-only grants view access to every non-sensitive area of the dashboard.

It deliberately excludes the sensitive areas: billing, developer tools, donor portal configuration, integrations, team, roles, the audit log, and organization settings. A Read-only member can open Reporting and see reports, but cannot export data — so no one can bulk-export supporter PII without an export capability.

No access

A seventh state, No access, grants zero permissions. A member with No access can sign in but sees a “contact your administrator” screen until a role is assigned. It’s the safe default for a member who hasn’t been given a role yet, and it isn’t offered as a choice when inviting someone — you pick one of the six functional roles instead.

At a glance

The table below summarizes each role’s access by area. M = manage, V = view only, — = no access.

Area	Admin	Finance	Marketing	Developer	Customer Success	Read-only
Supporters & supporter data	M	V	V	V	M	V
Transactions, pledges, soft credits	M	M	—	—	V	V
Campaigns, events, forms, fundraisers	M	V	M	—	V	V
Funds & designations	M	M	V	—	—	V
Messages, journeys, communications	M	—	M	—	V	V
Tags & automation	M	—	M	—	apply / view	V
Payouts & reconciliation	M	M	—	—	—	—
Billing	M	M	—	—	—	—
Reporting (incl. export)	M	M	M	—	view	view, no export
Integrations & API	M	—	—	M	—	—
Donor portal & customization	M	—	—	M	—	—
Team, roles & org settings	M	settings: payment	—	roles: view	—	—
Audit log	M	V	—	V	—	—

Tip

To see a role’s complete, permission-by-permission breakdown, open Settings → Roles & Permissions and select the role. See Viewing permissions.