Owner and Rep Roles: What Each Can Do, and the Three Switches an Owner Sets Per Rep
Quick answer
MAJ Leads has two roles. An owner or admin sees and does everything. A rep works their own calls and the leads nobody has taken yet. Three switches, which an admin sets per rep and which start off, decide whether that rep can export and see reports, send WhatsApp messages, or use newsletters.
Note
Why not give every rep everything?
Most reps need three things: the calls due to them, the lead in front of them and a way to log what happened. They do not need the whole customer list as a file, the routing rules or the billing page. A rep who leaves takes whatever they could download with them. The usual name for the fix is least privilege. The OWASP Top 10 2021 page on broken access control lists "violation of the principle of least privilege or deny by default" among the common failures, and advises that, "except for public resources, deny by default". MAJ Leads follows that shape: a person starts with the little they need, and an admin adds more on purpose.
What are the two roles?
| Area | Owner or admin | Rep |
|---|---|---|
| Work calls and log results | Yes | Yes |
| Set their own status, for example away | Yes | Yes |
| Leads | All leads in the workspace | Their own leads and the leads nobody has taken yet |
| Team page | Everyone | Themselves only |
| Add and manage users | Yes | No |
| Routing rules, lead sources and WhatsApp setup | Yes | No |
| Billing | Yes | No |
| Export, reports, WhatsApp messages, newsletters | Yes | Only what an admin switches on |
The owner of the workspace is an admin, and an admin can be added without being the owner. The screens hide what a rep cannot use, and the server routes and the database check the same rules, so hiding a button is not the only guard. Our guide to what a sales manager can see about each rep covers the other direction.
What are the three switches?
On the Team page, under each rep's name, an admin sees a row of switches. The screen says new people start with every switch off, and each switch saves on its own.
| Switch | What it lets the rep do | What stays open or closed either way |
|---|---|---|
| Export and reports | Download a spreadsheet of leads, and open the portal reports. | A rep who is granted it downloads only their own leads, the ones they work and the ones they added. An owner or admin downloads all of them. A download is limited to one a minute. |
| WhatsApp messages | Read the WhatsApp thread on a lead's page and send from MAJ Leads' WhatsApp number. | The one-tap WhatsApp to a lead from the rep's own phone is part of chasing and stays open to every rep. Setting up WhatsApp, routing and templates stays admin only. |
| Newsletters | Use the newsletters feature. | Without it the feature is closed to that rep. |
Two details matter in practice. A change takes effect on the rep's next request, with no new sign-in. And the change is recorded: setting a switch writes an entry to the workspace's security event log with the switch and whether it went on or off. WhatsApp sending from MAJ Leads is rolling out, so the WhatsApp switch matters most once your number is connected. Our guide to exporting leads to Excel covers what is in the file.
Does the UAE personal data law say anything about this?
It sets duties that role limits help to meet, though no setting can meet them for you. In the English text of Federal Decree-Law 45 of 2021, Article 5 says personal data must be "sufficient for and limited to the purpose" of the processing and kept securely, and Article 7 asks a controller to apply technical and organisational measures on default settings so that processing is limited to its purpose, including "the period of storage and accessibility" of the data. Starting every rep with the export and WhatsApp switches off is an example of a default that limits access. Whether your own setup meets the law is a question for your data protection adviser. Our guide to PDPL data requests covers the requests side.
Tip
Where does this leave an owner?
Your reps can work every lead they are given without holding the whole list. When one needs more, you turn on one thing for one person and it is logged. See how it works and how leads move between reps.
Sources
Frequently asked questions
What roles does MAJ Leads have?
Can a rep export the lead list?
What does a new rep start with?
Can a rep still message leads on WhatsApp without the switch?
Are permission changes recorded?
Anam Jalal
Founder & CEO, MAJ Leads
Anam Jalal is the founder of MAJ Leads, a Dubai-based lead management system that puts every paid lead on a rep's phone within about thirty seconds and chases it until it has an answer. He works hands-on with UAE clinics, brokerages and trading companies on lead follow-up, WhatsApp and CRM integrations, and ran voice AI deployments in the UAE before the company focused on lead management.
Read more about AnamRelated articles
Guide
What Your Sales Manager Can See About Each Rep, and What They Cannot
A team that does not know what is measured assumes the worst. This guide lists what MAJ Leads shows an owner about each rep, what it cannot see, why every rep can read the list, and what the UAE PDPL asks of you as an employer.
Guide
Exporting Leads to Excel: Arabic Names, UAE Phone Numbers and Formulas
A leads spreadsheet is the one file your team will always open. If Arabic names turn into symbols, a phone number reads 9.71E+11 or a cell runs as a formula, the export has failed. This guide explains each problem, what the standards say and what MAJ Leads does.