Access Rights: CRM
The access rights to CRM can be set by Portal Administrators.
You can do this in the Portal Settings (1) → CRM → Main Settings (2) → Users Access Settings (3).

Or click on the User profile for whom you want to assign access rights → navigate to Access Rights tab.

You can deny an access to the employee, grant an Administrator or Employee accesses.
Administrator
Administrators have unlimited access to account cards and opportunities.
Employee
Employees have limited access to opportunities and CRM Account pages. They do not have access to CRM reports.
In opportunities assigned to another employee, they cannot change any information or plan activities (events, projects, tasks, invoices).
In CRM main settings, you can remove access to all opportunities and CRM Contacts for users with Employee access level.
In this case, they will only see their own opportunities and CRM Contacts, and Opportunities and CRM Contacts that have not been assigned to anyone.
If you want to make an exception for specific Opportunities or CRM Contacts, you can add Employees to Opportunities or CRM Contacts as Followers.
Users with Employee access level cannot change any information or assigned user in Contact or Organization cards. They do not see invoices issued to customers, created opportunities, projects, tasks, etc., if they do not have access to it.
In the settings, you can also allow or restrict the deletion of opportunities to employees. If this option is unchecked, users with the "Employee" access rights will not be able to delete their opportunities, as well as those that are not assigned to any teammate.

Access Denied
In this case, the employee will not have any access to opportunities and accounts. Additionally, they will not be able to go to their pages via an external link.
