Feature · Access Control

Not access — trust.

Module-level RBAC, project & client scopes, 2FA, session management and a GDPR-compliant audit trail in one panel. Mana AI catches idle permissions and suspicious access patterns before any leak happens.

Module-level
RBAC + action permissions
1 click
off-boarding & session revoke
GDPR
& KVKK-compliant audit trail
ACCESS CONTROL PANEL PREVIEW

Screenshot area ready

When visuals arrive they'll fit these frames — sized and proportioned for the product UI.

Permission matrix panel2FA & session managementAudit trail stream
Live system · Real-time

Don't just read about it —
use Managelify.

No sign up, no card, no setup. One click opens the real dashboard with projects, tasks, Mana AI and the calendar — exactly as if it were your own account.

No sign up requiredNo credit card neededAll modules unlocked
Live
Managelify live dashboard preview

Ready? Step inside the system.

No sign-up · No card · Open in 1 second

PROBLEM

Open links, single admin, unwritten rules.

A public link in Drive, a single admin in Slack, 30 linked pages in Notion. On resignation, account closure is 'forgotten'; in audits, 'who saw what?' goes unanswered.

DRIVE 'PUBLIC' LINKS

A single link leaks proposals, pricing, contracts. Who opened it, who downloaded it — no answer; in a GDPR audit you have nothing to show.

SLACK/WHATSAPP 'SINGLE ADMIN'

One person has access to everything. When they're on vacation work stops; or one mistake archives the whole channel — irreversible.

TRELLO / NOTION 'SHARE PAGE'

A page gets shared but 30 linked pages are open inside. You want 'only this visible' — in reality 'everything is visible'.

FORGOTTEN ACCOUNTS AFTER RESIGNATION

The ex-employee is still in Drive, still in Slack, still in CRM. No off-boarding checklist; risk grows while you sleep.

CUSTOMER WITH 'TOO MUCH' ACCESS

A customer enters their portal and sees other customers' work. Reputation ruined, contract dispute begins — 'how do we explain this?'

VERBAL PERMISSIONS, NO RECORD

A 'you can look at this' culture. Who granted what, when, why — in an audit there's no answer at all.

One panel · WRM

RBAC + scope + security + AI — all in one place.

In classic tools permissions are scattered and verbal. Managelify ties permissions to module, project, client and time. We call this Work Relationship Management (WRM) — not just access, the structure of the relationship is preserved.

Module-level RBAC
Project/client scope
2FA & sessions
SSO / SAML
Off-boarding 1 click
Sensitive data label
Audit trail (GDPR)
Mana AI anomaly
01

Define roles and scope

Owner, Admin, Member, Customer, Guest + unlimited custom roles. Module-level (project, task, CRM, file, finance) and action-level (view / edit / delete / share) permissions in one panel.

02

Narrow access by project & client

Permissions are scoped not just to the org but to projects and clients. An account manager sees only their portfolio, a designer only the project they're assigned to — information doesn't spread unnecessarily.

03

Secure identity and sessions

Enforce two-factor authentication (2FA), see device & session lists, revoke all sessions in one click on suspicious login. SSO and IP policy at the organization level.

04

Let Mana AI catch anomalies

Mana AI flags overly broad roles, idle permissions, forgotten access on off-boarding. 'This member hasn't opened CRM in 60 days — should we lower their permission?' — risk managed by data.

DEPTH

Roles, scope, security and audit.

Drive hands out a link and the job's done. Managelify ties permission to context, protects it, audits it — the loop is complete.

Roles & RBACAccess & sharingSecurity & sessionsAudit trailAI signalsScenariosSettings

Roles & RBAC

  • Built-in roles (Owner / Admin / Member / Customer / Guest)
  • Unlimited custom role definitions
  • Module-level permissions (project, task, CRM, file, finance)
  • Action-level permissions (view / edit / delete / share)
  • Project-level scope narrowing
  • Client-level scope narrowing
  • Temporary roles (until X date)
  • Role template duplication & versioning

Access & sharing

  • Guest & external sharing management
  • Time-limited & password-protected links
  • Sensitive data labeling (PII / pricing / contract)
  • Customer-facing view (only approved items)
  • Hide internal notes & drafts
  • Permission inheritance rules
  • Conflicting permission warnings
  • Approval chain for permission elevation

Security & sessions

  • Two-factor authentication (2FA / TOTP)
  • One-click revoke of all sessions
  • Device & IP list tracking
  • SSO / SAML (enterprise)
  • Password policy & rotation
  • Suspicious login alerts
  • One-click off-boarding (full revoke)
  • Account freeze & archive

Audit trail

  • Who, when, accessed what log
  • Permission change audit trail
  • File view & download log
  • Customer data access record
  • Login & session history
  • Audit trail CSV / PDF export
  • Retention period (GDPR-compliant)
  • Anomaly notification (email + inbox)

AI signals

  • Permission anomaly detection ('this role is too broad')
  • Idle permission warning (60+ days unused)
  • Off-boarding forgotten permission list
  • Suspicious access pattern detection
  • Right-role suggestion for onboarding
  • 'Unusual' access signal on sensitive files
  • Customer visibility check ('an internal note may have leaked to this client')
  • Weekly security & permission summary

Use scenarios

  • Agency · client portal + team view separation
  • Software team · prod / staging access split
  • Freelancer · temporary guest for subcontractor
  • Startup · KPIs for investors, ops for the team
  • Enterprise · SSO + IP policy + GDPR audit
  • Education · teacher / student / observer

Settings & policy

  • Default role & approval flow
  • 2FA requirement (organization)
  • Session duration & auto-logout
  • IP allow-list / deny-list
  • External sharing policy
  • Guest access duration
  • Audit trail retention
  • Sensitive data labeling rules
ENHANCERS

Not just granting access — building structure, protecting, auditing.

Permissions = the system's spine

As the team grows, 'who sees what' becomes bigger than the work itself. Managelify manages permissions on a module + scope + time axis in one panel — not scattered.

Off-boarding ends in one click

When a member leaves all access closes, sessions drop, files they shared transparently stay with the org. There's no such thing as a 'forgotten account'.

Customers see only what they should

Internal notes, pricing discussions, draft deliveries stay with the team; only approved deliveries and shared files reach the client. Transparency and confidentiality work at the same time.

Mana AI = silent security analyst

Mana AI catches idle permissions, overly broad roles, suspicious access patterns ahead of time. It signals leaks before they happen.

MANA AI

Catch the leak before it leaks.

Mana AI flags overly broad roles, idle permissions, suspicious access patterns and forgotten access on off-boarding. It suggests the right role for onboarding and warns instantly on unusual access to sensitive files — your security decisions are data-driven, not intuitive.

Permission anomaly detectionIdle permission warningOff-boarding reminderSuspicious access signal

EXAMPLE ALERT

"Ayşe hasn't opened CRM in 60 days but is in the 'Admin' role. Want me to lower her to 'Member'?"

Idle permission + anomaly detection Suspicious access pattern alert Off-boarding cleanup list Apply with one click
WHO IT'S FOR

Solo to enterprise — every access lands in its place.

Freelancer

The client sees only their own project — the rest is your business.

You invite the client to Managelify as a guest. They only see their own project, their own files, and only approved deliveries. Other clients, your pricing work, internal notes are invisible. When the job ends permission is revoked in one click; your portfolio stays safe.

Agency

The team's space is clear, the client's view is clean.

Account managers see only their portfolio, designers their assigned project, production the approved brief. The client portal only looks at their own work. New members onboard in 1 day; on resignation Mana AI's permission cleanup takes 2 minutes.

Startup & B2B team

KPIs for investors, operations for the team, the whole system for the founder.

Different views on the same platform: investors see only the KPI dashboard, the team an operational view, the founder the whole system. SSO connects enterprise identity, GDPR-compliant audit trail records every access — no security gaps as you scale.

COMPARISON

Workspace, Asana, Slack — each is a piece. Managelify is the structure.

The table below shows the strengths of popular access solutions and the contextual access control Managelify offers in one panel.

Google Workspace permissionsAccount & file-level accessNo project/client context; no workflow permissions; no AI anomalies
Asana / Trello rolesBasic task-level rolesLimited customer permissions; no module-level RBAC; weak off-boarding
Slack permissionsChannel-level accessCommunication only; no work & file permissions; limited audit trail
Notion sharingPage-level sharingNo module-level permissions; no customer role; manual off-boarding
Manual Excel + verbal rulesFree and flexible (apparently)No audit trail; access stays open after resignation; not GDPR-compliant
Managelify Access ControlWRMModule + scope + time + Mana AI in one panel
FREQUENTLY ASKED QUESTIONS

Clear answers about Access Control.

What exactly does Managelify Access Control do?

Managelify Access Control lets you define roles, grant module- and action-level permissions, narrow access by project & client, and log all of this with a GDPR-compliant audit trail. Drive links, Slack permissions, Trello roles, the permission Excel — they're all managed with context in one panel.

Do you support RBAC (role-based access control)?

Yes. Alongside built-in roles (Owner, Admin, Member, Customer, Guest), you can define unlimited custom roles. Each role has module-level (project, task, CRM, file, finance) and action-level (view / edit / delete / share) permissions. Permission scope can be narrowed at the organization, team, project, or client level — true RBAC.

Can I grant permissions only for a specific project or client?

Yes, this is Managelify's core differentiator. Permissions aren't scoped only to the org; they're scoped to teams, projects, and clients. An account manager can see only the customers in their portfolio; a designer can access only the files of projects they're assigned to. Information doesn't spread unnecessarily, the audit trail stays clean.

Do you have two-factor authentication (2FA) and SSO?

Yes. 2FA (TOTP / authenticator) can be enabled for all accounts; an organization admin can enforce 2FA for all members. For enterprise customers, SSO / SAML, IP allow-list and password policy are supported. Suspicious logins trigger automatic alerts; all active sessions can be revoked in one click.

What happens when a member leaves? How does off-boarding work?

You off-board in one click: the member's access closes, active sessions drop, files they shared transparently stay with the org. Mana AI also offers a permission cleanup list: 'Whom do you want to transfer this member's tasks to? Which files should no longer be shared?' No account is forgotten, no data is left exposed.

Is an audit log kept? Is it GDPR-compliant?

Yes. All access, permission changes, file views, downloads, and customer data access events are kept in the audit trail: who, when, accessed what, changed what — logged in compliance with GDPR and KVKK. You set the retention period; reports export as CSV/PDF. Anomaly notifications hit your email and inbox.

Can the customer see my whole team and internal notes?

No. The customer role is purpose-built: they only see tasks, files and messages you've approved. Internal notes, pricing discussions, draft deliveries stay with the team. With 'sensitive data labels' you can place extra protection on certain fields; labeled content is never visible to customers and guests.

What does Mana AI do for access & permission security?

Mana AI works like a silent security analyst: it flags overly broad roles, idle permissions unused for 60+ days, suspicious access patterns and forgotten access on off-boarding. For onboarding it suggests the 'right role' based on similar past members; for unusual access on sensitive files it raises an instant alert — you catch the leak before it leaks.

MANAGELIFY

End the access chaos — trust starts today.

Define your first role, enable 2FA, export your first audit trail report. Off-boarding in 1 click, GDPR-compliant — no security gaps as you scale.

Start free Schedule a demoNo credit card · open in 1 second