Give your team exactly the access they need — and nothing more

A leasing agent does not need access to the general ledger, and a bookkeeper does not need tenant contact details. Role-based access control assigns each person the scope their job requires, and the audit log records what they did with it.

What RBAC covers

  • Employee accounts for every member of your team
  • Roles that scope access to properties and functions
  • Assign specific properties to specific agents
  • Separate portals for landlords, management, and service pros
  • Full audit logging of consequential actions
  • Two-factor authentication and device verification on top

Least privilege is a security control

Limiting access is the single most effective control against both mistakes and misuse. Combined with audit logs, new-device sign-in alerts, and 2FA, it means an account compromise has a bounded blast radius.

Frequently asked questions

Can I restrict an agent to certain properties?

Yes. Properties can be assigned to specific agents, and roles scope what each person can see and do.

Is there a record of what staff did?

Yes. Audit logging captures consequential actions across the platform.

Get started

Management companies get volume-discounted processing and free white-glove data migration.

Create a management company account

See pricing · Browse all features

Documentation

  • Roles & Account Types — The difference between landlord, management, service professional, and tenant accounts — and what each role can do on Seayora.
  • Workforce & Task Management — How management companies assign staff, manage tasks and check-ins, and keep an accountable record of work.
  • The Accounting Audit Log — How Seayora’s immutable, append-only audit log records every accounting action for accountability and trust.
  • Account Security: SSO, 2FA & Passkeys — How to secure your Seayora account with single sign-on, two-factor authentication, device verification, and passkeys (WebAuthn).

Related features

  • Employee Tasks & Check-Ins — Assign tasks to staff, track completion, and require check-ins at site visits so field work is accountable rather than assumed.
  • Audit Logs — Audit logging across consequential actions, so account activity, permission changes, and financial entries all leave a reviewable trail.
  • Two-Factor Authentication & Device Security — Two-factor authentication (2FA/TOTP), new-device sign-in alerts, device verification, and passkey-based sign-in protecting every Seayora account.