Roles & permissions
Tenacap keeps two groups separate: your team, who manage the cap table through workspace roles, and your stakeholders, who see only their own holdings through the portal.
Two kinds of access
- Workspace roles - for the people who operate the company’s cap table (you, a co-founder, an ops lead). They sign in to the full app and their role decides what they can do.
- The stakeholder portal - for your shareholders and employees. They receive an invite and see a private, read-only view of only their own holdings. See the stakeholder portal.
Workspace roles
Whoever creates the workspace becomes its first Admin. From there, access runs on four roles, strongest to weakest:
- Admin - full control of the company and the workspace.
- Editor - can change the cap table (record equity, import, model rounds) but not manage the workspace itself.
- Counsel - read-only, for an outside attorney or fractional CFO. Same reach as Viewer today, and the person holding it sees all of their clients in one list. See the advisor seat.
- Viewer - read-only access to the cap table.
Roles are hierarchical: an Admin can do everything an Editor can, and an Editor everything a Viewer can. A role grants permissions only in the workspace it was given in.
An AI assistant you connect acts with your role and never more. It cannot change anything itself: it proposes, and a signed-in member with the role the change needs confirms it. See Confirming what an assistant proposes.
What each role can do
| Capability | Viewer / Counsel | Editor | Admin |
|---|---|---|---|
| View the cap table, ownership & reports | ✓ | ✓ | ✓ |
| Export your data (CSV / JSON / diligence pack) | ✓ | ✓ | ✓ |
| Record equity - issuances, transfers, repurchases, SAFE/note conversions, option exercises; upload and preview an import | — | ✓ | ✓ |
| Authorize a new share class, record a priced round, reverse a ledger entry, or commit an import | — | — | ✓ |
| Record board approvals | — | — | ✓ |
| Download a board consent PDF; read the change log / audit trail | — | ✓ | ✓ |
| Invite stakeholders to the portal | — | ✓ | ✓ |
| Merge duplicate stakeholders | — | — | ✓ |
| Manage the workspace & close the account | — | — | ✓ |
Inviting & managing members
Admins add and manage members from People, its own item in the left navigation. Every member sees the item; adding someone or changing a role is Admin-only, re-checked on the server, and anyone else who opens it sees which admins to ask. Before the company has a cap table, the company page and the first screen also link to the same invitation, so you can hand the setup to your CFO or attorney.
- Add or invite. Enter any email, pick a role (Admin, Editor, Counsel or Viewer), and click Add or invite. If that person already has a Tenacap account they’re added right away; otherwise an invitation email goes out and a pending invite appears until they accept.
- Pending invitations. Outstanding invites are listed, each with Resend and Revoke.
- Change or remove. Adjust a member’s role or remove them. The last remaining Admin can’t be removed or demoted, so a workspace always keeps an owner.
The stakeholder portal
Your employees and investors don’t need a seat in the workspace. An Admin or Editor invites them to the stakeholder portal, where each person signs in and sees a private summary of their own holdings: shares, vested vs. unvested options, SAFEs and notes, and their documents. Full details are in the stakeholder portal.
Changing roles, and every change is logged
An Admin sets and changes roles. Every role change is written to the hash-chained change log (category RBAC), so “who gave whom access, and when” is answerable.
Counsel, investors & advisors
An outside attorney or fractional CFO gets the Counsel role, from the same People page as anyone else. It is a read-only seat in your workspace, you grant it and you remove it, and it gives them no way to reach any other company you work with.
It gives them one login for every client who has done this. They sign up at the advisor seat - no company, no cap table of their own - and each company that adds them appears in their client list with the last thing that changed in it. An advisor with six clients no longer keeps six logins.
Give a prospective investor a Viewer seat for the duration, or send a diligence pack export and grant nothing at all. Existing shareholders never need a role here - they use the portal.