Skip to main content
Company Settings is one screen with a sidebar of tabs: the workspace profile, teammates, roles, blocked domains, compliance, API keys. Each tab checks its own permission before it renders.
Where
SettingsCompany Settings
Your role needs
Update access to Company Settings update-companies. Admin have it by default.
If you cannot find this in your sidebar, your workspace may have a custom menu configuration. Contact support and we will check it for you.
The permission in that block is the one the first tab needs, not a key to the rest of the screen. There is no single permission that opens the whole of Company Settings, so two members can open it and see sidebars of different lengths. A permission a member lacks hides its tab completely. The tab never renders greyed out.

Every tab, and the permission it needs

Twelve tabs render in the sidebar. Eight of them (everything except Integrations, Email Prompts, Access and Roles & Permissions) check one shared permission, update-companies. The other four each check a permission of their own. Integrations is not a smaller, settings-only version of the connectors page. Following that tab loads the exact same component as Apps & CRM in the main sidebar, so the Apps & CRM overview linked above covers everything on it.
There is a thirteenth /settings/whitelabel route, guarded on read-white-labels, that renders the Whitelabel screen. It has no sidebar row, and nothing in the product links to it. Whitelabel is reached from the profile menu in the header instead, and that copy of the screen is not permission-guarded. Do not go looking for it in this sidebar. It sits after Advanced in the same list the redirect below walks, so it is the last thing tried before the dashboard.
Following a link into a tab your role cannot open never shows an error page. It redirects you to the first tab in the table above that your role can open, or to the workspace dashboard if your role can open none of them. That matters because a few links elsewhere in the product (the header menu, the workspace cards) always point straight at the first tab, Company Settings, which needs update-companies. A member without it lands on their own first allowed tab instead of a broken page. A read-only role, for example, holds read-integrations but not update-companies, so the same link opens Integrations for them.

Roles & Permissions

The three system roles, how a custom role is built, and the guard rails that refuse a change.

Why can't I see a menu item?

The full order to check when something is missing: role permission, menu override, plan and partner branding.

Feature availability matrix

Every surface in the product, the permission it needs and the roles that hold it, in one generated table.