Types of Users

Overview of user roles

Vendorapp supports a flexible access model with three core user types: Agent Owner, Agent, and Viewer. These roles define what a user can see and do across the platform.

In addition, any user — regardless of role — may also become a Contract Owner when they upload a contract, gaining additional permissions for that specific vendor relationship.

In addition, any user — regardless of role — may also become a Billing contact gaining additional permissions for Vendorapp billing.

Roles are assigned when inviting users and can be updated at any time (subject to plan limits).

Agent Owner

The Agent Owner is the primary administrator of your Vendorapp account. There is only one Agent Owner per company.

Key capabilities include:

• Full access to all features, vendors, and contracts

• Manage users, settings, and company preferences

• Billing contact with access to all payment and plan controls

• Only user who can:

  • Delete the business from Vendorapp
  • Change the plan type
  • Receive platform-critical notifications (e.g. security alerts, billing issues)

If the Agent Owner is transferred, ownership must be explicitly reassigned from the Users screen.

Agent

Agents are administrators with broad access and elevated permissions — but with some restrictions compared to the Agent Owner.

Agents can:

• View and manage all vendors, contracts, contacts, breaches, and stakeholders
• Add, archive, and remove users (except the Agent Owner)
• Perform tasks, assessments, and contract-related actions
• Access company usage stats and settings (excluding billing controls unless added as a billing contact)

Agents cannot:

• Delete the business
• Change the pricing plan
• Reassign Agent Owner rights

Agents can be billing contacts and manage invoices if granted access.

The number of agents is limited by your selected plan.

Viewer

Viewers are the most common user type — typically employees or stakeholders who need visibility into specific vendors or contracts.

Viewers can:

• Look up and add vendors
• View vendor profiles, assessments, breaches, contacts, and contracts (if granted stakeholder access)
• Be added as stakeholders on contracts
• Raise breaches (if they own an active contract or are a stakeholder)
• Add vendors and become Contract Owners

Viewers cannot:

• Perform tasks
• Manage other users
• Edit vendor details, contracts, or settings
• Access billing or plan controls (they can access billing if given Billing access)

Contract Owner (user status overlay)

Contract Owner is not a user type but a status that overlays on any role (Viewer, Agent, or Agent Owner) when that user uploads an active contract.

Key points:

• The user who adds a contract automatically becomes its Contract Owner
• Contract Owners gain the ability to:
  • Cancel, rename, or transfer the contract
  • Add stakeholders
  • Raise breaches specific to that contract
  • View and manage contract details regardless of base role

When a user's contract expires and they no longer own or manage any other active contracts, they revert to their base role (Viewer or Agent).

User role comparison table

⚠️ = with conditions (e.g. permission, contract ownership, or billing access granted)