The digital operating system for multi-location brands. Schedule a Demo →

Skip to content
Team & Roles

The right access
for the right role.
No more, no less.

KynectLocal's role system gives brand admins precise control over who can see and change what across the platform. Assign roles at the brand level or per location. Track every user's activity in the audit log.

Schedule a Demo Explore the Platform
BRAND ADMIN
Full access across all locations
ACCOUNT MANAGER
Operational access, no governance config
FRANCHISEE
Location-scoped, governed edits only
MARKETING
Read-only analytics and dashboards
Permission active
Not available
USER MANAGEMENT

Every user in your network, with their role and assigned locations.

The Team view shows all users across the brand, their name, email, role, and assigned location scope. Brand Admins see the full list. Each row shows whether a user is scoped to specific locations or has network-wide access. Invite new users by email from this view.

  • →Name, email, role, and location scope per user
  • →Network-wide vs. location-scoped access at a glance
  • →Invite by email, no IT provisioning required
  • →Role badge: Brand Admin, Account Manager, Franchisee, Marketing
app.kynectlocal.com/team
User Role Scope
JM
Jessica Miller
Brand Admin
All locations
TC
Tom Carlisle
Acct Manager
12 locations
SR
Sarah Reynolds
Franchisee
Location #42
DK
Marketing
All locations (read)
Edit User Scope
SR
Sarah Reynolds
Franchisee
Assigned Locations
Downtown Phoenix #42
Full edit access
Scottsdale North #18
No access
Tempe Marketplace #7
No access

Scope enforced at API level. Sarah cannot see or access locations #18 or #7, even by direct URL.

ACCESS CONTROL

A franchisee sees only their location. That's by design.

When you assign a Franchisee role and scope it to Location A, that user can only see, edit, and manage Location A in their admin. They cannot see Location B's leads, analytics, settings, or governance queue. This location scoping is enforced at the API level, not just the UI.

  • →Location scoping enforced at the API level
  • →Franchisee sees only their location's data
  • →Multiple locations can be assigned to one user
  • →Account Manager role for agency/operational access
ROLES

Four roles. Clear boundaries.

Access control that matches the actual structure of a franchise organization, from brand-level administrators to location-scoped operators to read-only marketing stakeholders.

BRAND ADMIN

Full access

Complete platform access across all locations. Can configure governance rules, manage all users, publish to any location, send network broadcasts, and view all audit logs. Typically held by corporate brand and operations leads.

ACCOUNT MANAGER

Operational access

Can manage location data, process approval queues, and run broadcasts, but cannot change governance configuration or manage other admins. Built for agencies and internal operations teams who manage locations on behalf of franchisees.

FRANCHISEE

Location-scoped access

Can edit their assigned locations within the bounds of governance rules. Cannot see other franchisees' data. Can submit change requests for approval-required fields. Scoped precisely, a user can be a Franchisee for location A with no access to location B.

MARKETING

Analytics read-only

Can view analytics, AI readiness scores, and reporting dashboards across the network. Cannot edit any location data or trigger any changes. Appropriate for agency reporting contacts and internal marketing stakeholders.

CONTENT PERMISSIONS

Corporate decides what franchisees can see, edit, and publish.

Every user role in KynectLocal comes with a permission set that controls which features are visible in the dashboard, which content can be edited, and whether a publish requires corporate approval. Franchisee Editors can edit content but cannot publish without approval. Location Admins can publish within their location. Brand Admins control everything. Roles are assigned per user, not per location.

  • →Franchisee Editor: edit-only, publish requires approval
  • →Location Admin: full local control, no corporate settings access
  • →Brand Admin: network-wide access, governance controls, billing
  • →Custom roles configurable for agencies and partner teams
Permissions Matrix
Action
Admin
Acct Mgr
Franchise
Mktg
Edit location data
✓
✓
✓
–
Publish changes
✓
✓
Approval
–
View analytics
✓
✓
✓
✓
Configure governance
✓
–
–
–
Manage users
✓
–
–
–
Send broadcasts
✓
✓
–
–
CAPABILITIES

What team management does

Per-location role scoping

A user can hold different roles for different locations. A regional manager might be an Account Manager for 12 locations while having no access to others. Scoping prevents data cross-contamination across the franchise network.

Email invitations

Invite any user with an email address. They receive an onboarding link, set their password, and land in the platform with exactly the access you assigned. No IT ticket, no provisioning system, no IT dependency.

Activity logging

Every action taken by every user is logged, what they changed, when, and on which location. The audit trail is accessible to Brand Admins and is exportable for compliance review, franchise dispute resolution, or legal documentation.

HOW IT WORKS

From invite to active in minutes

01

Invite via email

Enter the user's email address. They receive an invitation with an onboarding link. No IT provisioning, no SSO configuration required at setup. Enterprise SSO integration is available for brands that require it.

02

Assign a role and scope

Choose the role: Brand Admin, Account Manager, Franchisee, or Marketing. For Franchisee roles, select which specific locations they have access to. The scope is enforced at the API level, not just the UI.

03

Activity is tracked from day one

From the first login, every action is logged. Brand Admins can see who changed what, when, and why, across every location in the network. The audit trail starts immediately and never stops.

Built for every role in the network

For Franchisors

Know who did what, always.

  • → Prevent access sprawl. Every user has exactly the permissions their role requires, with no accidental brand-level access for franchisees.
  • → Onboard new franchisees without IT. Invite them via email, scope to their locations, and they're operational immediately.
  • → Audit logs give you accountability for every change. Essential for franchise compliance and dispute resolution.
For Franchisees

Clear access. No surprises.

  • → Your platform view shows exactly your locations. No scrolling through data that isn't yours, no accidental edits to another location.
  • → Onboarding is an email. You receive a link, set your password, and you're in your location dashboard within minutes.
  • → If you manage multiple locations, they're all in one view. No separate logins, no context switching.

Related features

Governance & Approvals

Roles define who governance rules apply to. Governance defines what each role can change. Together they form the access and control layer.

Explore →

Audit Log

Every user action feeds the audit log. The log records who made a change, what role they held, and the exact before/after values for every field.

Explore →

Messages & Broadcasts

Target broadcasts by role. Send to All Franchisees, Brand Admins, or specific role groups without managing a distribution list.

Explore →
PRICING

See what KynectLocal costs for your network.

Per-location pricing with no seat limits. Build a custom estimate in about two minutes.

Build my estimate See pricing

Schedule a Demo

Access control at franchise scale.

KynectLocal's role system handles networks with hundreds of locations and users without creating access sprawl. See how it works in a live demo.

Schedule a Demo → Explore the Platform