Truffle uses two layers of permissions: organization roles (account-wide) and job-level roles (per-position). Each teammate has exactly one organization role. They can additionally be granted job-level roles on specific positions, which override the org role for those positions. When roles conflict, the highest permission wins.
Organization roles
Every teammate has one of four organization roles, set when they're invited and changed on the Team Management page.
Owner — complete control. Only Owners can manage billing, change security settings, and transfer ownership. Use for founders and finance or admin leads.
Admin — full product access. Admins see all positions, manage settings, invite teammates, and set up teams. They can't change billing. Use for hiring managers, heads of talent, and anyone running the hiring process.
Member — create and manage their own positions only. Can't see positions owned by other teammates unless explicitly added. Use for individual recruiters or hiring managers who shouldn't see each other's work.
Viewer — restricted; sees only positions they've been explicitly added to. Can't create positions. Use for stakeholders who need to see specific candidates but shouldn't have broader access.
Job-level roles
On any individual position, you can grant a teammate one of two job-level roles. Job-level roles only affect that one position.
Job manager — can work the position's candidates: review them, leave notes, and change their status (Advance, Hold, Reject). Can't change the position's own setup, such as its questions or settings.
Viewer — can view the position and its candidates but can't review or change anything.
The person who created a position, along with organization Owners and Admins, already has full control of it (including its settings and questions), so you don't grant them a job-level role.
How organization and job roles interact
If someone has both an organization role and job-level roles, the highest permission wins on each position.
An organization Viewer with a Job manager role on one position has Job manager access to that position and Viewer access everywhere else.
An organization Admin with a Viewer job role on one position still has Admin access everywhere, including that position. The higher org role wins.
Who can change roles
Only Owners and Admins can change roles. Owners can assign or remove any role, including Owner. Admins can assign any role except Owner, and can remove anyone except the last Owner (there must always be at least one Owner on the account).