Understanding User Permissions in Orlo

Permissions are split into two types:

Company Permissions: Control settings for the entire company (billing, users, settings, reports).
Account Permissions: Control what a user can do on individual social media accounts (posting, replying, managing ads).

Key Terms:

Administer: Full control.
View: See information only.
Manage: Add, edit, or delete items.
Validate: Approve content before posting. "Un-Validated" means no approval needed.
Account Types: Which social media platforms a permission applies to.

Example: Someone with the "Post" permission enabled for Facebook can post to that Facebook account. Someone with "Administer Company" permission can manage all company settings.

Permission List: The following table provides an overview of all permissions available within the Orlo platform.

Permission	Description	Permission Type
Administer Company	Full control over company settings. Includes viewing Survey reports, managing company files, webhooks, vanity domain, office hours, audit log, company configurations (currency, UTM tracking, link shortening, managed files), tags, external integrations/CRMs, automation (triggers), inbox/outbox exports, campaign/post approvals/inbox/marketing/team/account/benchmarking reports, profanity filter, custom link shortener, company preferences (login methods, policy links, strong password, two-factor authentication, exclude last out of hours, offensive post deletion, social policy), company lockdown, lockdown access, email notifications (account/post deletion).	Company
View Team Report	View the Team Report.	Company
View Survey Reports	View Survey Reports.	Company
View Monitoring Streams	View monitoring streams.	Company
View Monitoring Search Streams Premium	View premium search streams.	Company
View Marketing Analytics	View Marketing Analytics.	Company
View Insights	View Orlo Insights.	Company
View Engagement Analytics	View Engagement Analytics.	Company
View Competitor Analytics	View Competitor Analytics.	Company
View Campaign Analytics	View Campaign Analytics.	Company
View Account Report	View Account Report.	Company
Validate Posts	Validate posts from users. Enables email notifications.	Company
Push Mode Administrator	Manage online statuses of users in Push Mode.	Company
Manage Public Drafts	Manage Public Drafts.	Company
Manage Monitoring Streams	Add, edit, or delete monitoring streams.	Company
Manage Competitor Analytics	Add, edit, or delete competitors/reports.	Company
Manage Campaigns	Add, edit, or delete campaigns.	Company
Administer Accounts	Add, edit, or delete social accounts. Manage chatbots.	Company
Administer Group Permissions	Add, edit, configure, or delete groups and change permissions.	Company
Administer Users	Add, remove, disable, or delete users and change individual user permissions.	Company
Billing	Manage company billing information.	Company
Can Redact	Ability to redact inbox content.	Company
Configure Surveys	Configure Surveys.	Company
Manage Company Files	Manage company files.	Company
Lockdown Access	Allow access during company lockdown.	Company
Post Image Un-Validated	Post images without approval (must also have `post_un-validated`)	X, Facebook, Google+, LinkedIn, YouTube, Instagram, Instagram Business, Twilio WhatsApp, Facebook Group, TikTok, Nextdoor Agency, Nextdoor Agency US, TikTok Business, Threads, Bluesky
Administer Friends	Un-follow and follow friends through X and Bluesky Block/unblock through Facebook and Twilio	X, Instagram, Facebook, Bluesky
Post	View content calendar (also accessed with `post_unvalidated`) Bulk upload posts (also accessed with `post_unvalidated`) View marketing suite (also accessed with `post_unvalidated`) Add social 'like' to inbound message Enable Publish button for posts or replies (post must be validated before it's sent to social network) Enable 'share' social post button Edit tags applied to outbox post Enables deleting posts (comments also require the `delete-comment` permission)	X, Facebook, Google+, LinkedIn, YouTube, Instagram, Instagram Business, Twilio SMS, Twilio WhatsApp, Facebook Group, TikTok, Nextdoor Agency, Review Trackers, Nextdoor Agency US, TikTok Business, Threads, Bluesky
View Inbox	Hide/delete messages View messages in the inbox View inbox stats - count actioned, count assigned, average response time Inbox bulk actions Export inbox messages Send a message/conversation in email Set email notifications via settings Edit publish post (must also have `post` and `post_edit` permissions) Access live chat (must also have `agent` permission) Filters accounts for push mode (along with `reply` permission)	X, Facebook, Google+, LinkedIn, YouTube, Instagram, Live Chat, Instagram Business, Twilio SMS, Twilio WhatsApp, Facebook Group, Review Trackers, Nextdoor Agency, Nextdoor Agency US, TikTok Business, Threads, Bluesky
Post Un-Validated	Post without restrictions/approval. View content calendar (also accessed with `post`) Bulk upload posts (also accessed with `post`) View marketing suite (also accessed with `post`) Enable publish button for posts or replies Enables validating posts (must also have `post` and `validate_posts`)	X, Facebook, Google+, LinkedIn, YouTube, Instagram, Instagram Business, Twilio SMS, Twilio WhatsApp, Facebook Group, TikTok, Nextdoor Agency, Review Trackers, Nextdoor Agency US, TikTok Business, Threads, Bluesky
Validate Account Posts	Validate posts (must also have `post` OR company permission `validate_posts`) Retry failed to publish posts (must also have `post`) Add email notification for unvalidated posts via settings	X, Facebook, LinkedIn, Google+, YouTube, Instagram, Instagram Business, Twilio SMS, Twilio WhatsApp, Facebook Group, Nextdoor Agency, Nextdoor Agency US, TikTok Business, Threads, Bluesky
Reply Un-Validated	Reply without approval.	X, Facebook, LinkedIn, YouTube, Instagram Business, Twilio SMS, Twilio WhatsApp, Review Trackers, Nextdoor Agency, TikTok Business, Nextdoor Agency US, Threads, Bluesky
Reply	Reply to messages (requires approval). View content calendar (also accessed with `post`) Bulk upload posts (also accessed with `post`) Send replies in the inbox (reply must be validated before it's sent to social network) Filters accounts for push mode (along with `view_inbox`)	X, Facebook, LinkedIn, YouTube, Instagram Business, Twilio SMS, Twilio WhatsApp, Review Trackers, Nextdoor Agency, TikTok Business, Nextdoor Agency US, Threads, Bluesky
Delete Comment	Delete messages and comments (also requires 'post' permission on account)	Facebook, Instagram Business, Facebook Group, Threads, Bluesky
Post Edit	Edit published posts	Facebook
Update Status	Post on the account.	Google+
Administer Connections	Search and add people (circles).	Google+
Create Ad	Create advertisements (must be validated before it's sent to the social network)	LinkedIn Ads, Facebook Ads,
Create Ad Unvalidated	Create advertisements unvalidated.	LinkedIn Ads, Facebook Ads,
Validate Ad	Validate advertisements.	LinkedIn Ads, Facebook Ads,
Agent	Participate in LiveChat.	Company

Understanding User Permissions in Orlo

This document explains what users can do in the Orlo platform settings area.