Roles

How Bunny roles use read and write scopes to control what users can access in the UI and GraphQL API, with a table of every scope.

Bunny uses roles to control which functionality users have access to. A role can contain one or more scopes that determine whether the role can read or write data in that area of Bunny. Roles are enforced in both the user interface and the GraphQL API.

Roles settings page with the Support role open, showing standard:read, standard:write and billing:read scopes — Role page

The table below shows all the different scopes and what they give access to.

Scope	Gives access to
Admin	Company settings, entities, integrations, templates and system logs
Analytics	Analytics and dashboards
Billing	Bill runs, invoices, payments, currencies and transactions
Developer	API clients
Owner	Account owner settings
Platform	Updating tenants and reporting tenant metrics
Portal	Creating and reading customer portal sessions
Product	Products, plans, price lists and features
Quoting	Viewing quotes
Security	Users, roles and groups
Signup	Signing up new accounts, for the Signup component
Standard	Accounts, contacts, leads, deals, quotes and subscriptions
Workflow	Workflows, approvals and webhook logs

Each scope has a read and a write level. The scopes reference lists them all.