The four roles
Owner, Manager, Staff and Customer. Owner and Manager run the business side, Staff is the person doing the work, and Customer is the family's own login into their own records and nothing else.
Only the Owner changes settings
This is the question that comes up most. A Manager can run the day to day — bookings, customers, the schedule, leads, invoices — and still cannot open your business settings. The same applies to issuing API tokens, registering webhooks, and relabelling your pipeline stages: those are the Owner's alone.
It is one permission doing all of that work, so if a Manager cannot do something administrative, this is almost always the reason.
What Staff can reach
Their own work, and a read-only view of the customers attached to it. Staff hold no permission over payments at all and none over reports, so those sections are not merely hidden from them — the pages refuse as well.
When a staff member signs in they land on My work rather than the Overview, because the Overview is the whole business's picture and most of it is not theirs to see.
Hidden and blocked are the same thing here
The rail and the pages read from one shared map of who may reach what, which means a section you cannot see is also a section you cannot open by typing its address. There is no menu-hiding that a determined URL gets around.
You can also narrow a role further for your own business under Settings → Roles and permissions. Narrowing is honoured everywhere the standard roles are; it takes permissions away rather than granting new ones.
Assigning work is your call
When you assign somebody to a booking, the roster is listed alphabetically on purpose. Sitterz does not rank, score, suggest or match your team, and it never will — choosing who goes to a family is your business's judgment and the software's job is to record it.