Inviting Users & Managing Roles: Organization Access
Real estate investing is rarely a solo sport. Whether you manage properties with co-investors, employ a part-time bookkeeper, or collaborate with an external CPA, sharing financial data securely is vital.
Mogul Books is built with a multi-tenant role isolation model. This document explains our security roles, property scoping, and how to invite team members to your organization.
The Tenancy & RLS Model
Mogul Books isolates data at the database level using Postgres Row Level Security (RLS) policies. Every ledger row carries an organization_id.
- A user can belong to multiple organizations (e.g., Main Street LLC and Oak Holdings LLC).
- Switching organizations in the UI instantly swaps your access credentials and ledger scopes.
- You can only view or modify records belonging to organizations where you hold an active membership.
Pre-Defined Organization Roles
To protect your financial integrity, Mogul Books offers four specialized roles. Each matches a specific real estate workflow:
| Role | Permissions | Best For |
|---|---|---|
| Owner / Managing Member | Full administrative control. Can invite users, link bank feeds, delete transactions, close ledger periods, and view reports. | General partners, LLC creators, and asset managers. |
| Bookkeeper | Full transactional access. Can enter manual transactions, categorize bank payments, match receipts, and manage lists. Cannot close periods or manage bank feeds. | In-house bookkeepers or virtual assistant assistants. |
| CPA / Accountant | Read everything. Cannot link/unlink bank feeds or delete closed periods. Allowed to post adjusting journal entries and export tax-ready packages. | Your tax preparer or external CPA. |
| Member / Co-Investor | Read-only access to financials and reports. Cannot modify transactions. Can be restricted to view only specific properties. | Silent partners or equity co-investors. |
Property-Scoped Access
If you have a co-investor who only owns equity in one of your five properties, you should not give them access to your entire portfolio's ledger.
Mogul Books supports Property-Scoped Memberships:
- When inviting a user as a Member (Co-Investor), you can define their
property_scope[]. - If scoped to "Tempe Quadplex", all P&Ls, transaction registers, and asset registers they view will be filtered to exclude your other properties.
- This allows you to run all your properties under a single LLC organization while maintaining strict privacy boundaries between co-investors.
Step 1: Inviting a User
To invite a user to your organization:
1. Navigate to the Setup Console and select the Users & Team tab.
2. Click + Invite Team Member.
3. Fill in the invitation fields:
- Email Address: The email address of the invitee.
- Role: Choose Owner, Bookkeeper, CPA, or Member.
- Property Scope: Select All Properties or check specific properties they are allowed to access.
4. Click Send Invitation.
A welcome email introduces the organization and assigned role. Its Open your invitation button signs the recipient in and opens the organization directly, without a password or verification code. The link is single-use and expires after 30 minutes; expired or used links lead to email-code sign-in. Recipients should not forward the email, because its link grants access to their account. If email delivery is unavailable, the member is still saved and you can use Send welcome email to try again.