§The Team Issue

The right people.
The right access.

Role-based access for church staff. Invite treasurers, pastors, ministry leaders, and board viewers — each with exactly the permissions they need. Nothing more.

No credit card required · 7-day free trial · Cancel anytime

Team
8 members · 2 pending invites
PJ
Pastor J.
pastor@grace.org
Active now
TR
Treasurer
treasurer@grace.org
Active now
WL
Worship Lead
worship@grace.org
Yesterday
MK
Board · Mary K.
mary@grace.org
3 days ago
?
Pending · new admin
newadmin@grace.org
Invited 2h ago
Every role change logged in audit5 of 8 shown
Invite sent
newadmin@grace.org · Admin role
§ I.Team Members

Invite by email, join with one click.

No shared logins. No "treasurer@" account everyone uses. Each person on your team gets their own account — invited by email, joined with one click.

  • Email-based invites
    Enter their email, pick a role, send. They click the link and they're in.
  • Personal accounts
    Every user is identifiable in the audit log — no anonymous shared accounts.
  • Revoke instantly
    Someone leaves the team? Remove them in one click. Access stops immediately.
  • Audit log of access
    Every invite, role change, and removal is recorded with timestamp and actor.
Invite team member
Send an invite by email
newadmin@grace.org
Owner
Admin
Treasurer
Viewer
They receive an email with a one-time sign-up link.
§ II.Roles & Access

Scoped tightly. By design.

Five roles, each with a specific job. Permissions are checked on every API call — not just hidden in the UI.

Role
Owner

Full access including billing. Usually the senior pastor or church admin.

Everything below
Billing & subscription
Add/remove Owners
Role
Admin

Manages settings and team. The right role for a church administrator.

Edit settings
Manage team & roles
Edit all books
Billing
Transfer ownership
Role
Treasurer

Manages financial records. The day-to-day bookkeeping role.

All transactions
Donors & statements
Budgets & reports
Team management
Church settings
Role
Ministry Leader

Manages one ministry. Available on Ministry tier.

Own ministry transactions
Own budget
Submit expense requests
Other ministries
Church-wide reports
Role
Viewer

Read-only access. Useful for board members and outside reviewers.

View reports
View transactions
View audit log
Edit anything
Export sensitive data
Role
Auditor

Time-bound read-only access. For outside CPA reviews.

Read-only books
Read-only audit log
Export reports
Edit anything
Stay past audit window
Ministries
4 ministries · 9 leaders
Ministry tier
Youth
3 leaders · own books
PJ
AB
CD
Worship
2 leaders · own books
WL
EF
Outreach
2 leaders · own books
MD
GH
Children's Ministry
2 leaders · own books
CM
IJ
Each leader sees their own ministry only
§ III.MinistriesMinistry

Each leader, their own scope.

Youth Pastor sees Youth. Worship Lead sees Worship. The treasurer sees everything. No more group spreadsheets or weekly emails asking for budget reports.

  • Scoped to a ministry
    Each leader only sees and edits transactions for their ministry.
  • Multiple leaders per ministry
    Assign a senior leader and one or two assistants if you need to share the role.
  • Expense requests roll up
    Ministry leaders submit; the treasurer approves. Audit trail records both sides.
§ IV.Notifications

Tell me when it matters.

Each user picks their own alerts. No inbox flood — just the few signals worth knowing about.

  • Large gifts
    Get an email when a gift over your threshold arrives — recognize big donors fast.
  • Budget thresholds
    Notified when a category hits 80% or 100% of plan — before it becomes a board question.
  • Failed payments
    Know immediately when a recurring donation fails so you can follow up with the donor.
Your notifications
Email alerts only — no SMS
Large gift received
Email when a gift over $500 arrives
Budget threshold reached
80% and 100% of plan
Payment failed
Recurring donation declined
New donor portal sign-up
Donor created an account
Reconciliation period opened
Monthly reconciliation ready
Weekly digest
Trend summary every Monday
Each team member configures their own preferences.

What we actually do, said plainly.

Role checks at the API

Permissions are enforced server-side on every request — not just hidden in the UI. Role boundaries are real, not cosmetic.

No shared logins

Every action is pinned to a real user account. Shared "treasurer@" inboxes are not a substitute for personal accounts.

Audit log of every access change

Invites, role changes, removals — every team-management action is recorded with the actor and timestamp.

Questions

What pastors ask first.

Go to Team in the sidebar, click Invite, enter their email and pick a role (Owner, Admin, Treasurer, Viewer). They get an email with a sign-up link — they create their account by clicking it.

The right people, the right access.

Invite your team. Pick roles. Watch the audit log fill with proper accountability.

7-day free trial · Cancel anytime · No credit card required