JS
Levvy, your AI collaborator
Levvy
Ready when you are.
You
Tell me about the three clients requesting this — what do they have in common?
Levvy
All three are 500+ seat deployments in regulated industries — fintech, healthcare, and legal. Two have explicitly cited compliance requirements as the driver. Combined ARR: $1.2M. Average contract age: 18 months, all currently in expansion discussions.
You
What's our current permissions model?
Levvy
Three roles: Admin, Editor, Viewer — workspace-level only. No project-level separation, no custom role creation.
You
Have there been other signals about this gap beyond the three clients?
Levvy
Yes — onboarding feedback from 14 accounts over the last 6 months. It surfaced under different labels: "access control," "sharing restrictions," "audit trail." Not always framed as permissions.
You
Okay. The compliance angle means the full 8-week custom roles build is probably the wrong scope. I want to write a PRD focused on scoped build — project-level R/W separation as the minimum viable fix. Can you start that?
Levvy
Got it. Do you want a recommendation section included, or leave that blank for you to write?
You
Leave it blank — I'll write it. Go ahead.
Levvy
PRD drafted in the artifact panel — problem statement, strategic context, and decision framework populated. Recommendation section is empty.
You
Good. Now create a stakeholder map. Key players: VP Eng, Head of Sales, CEO, the three enterprise clients, Customer Success, Finance. Engineering is skeptical, Sales is pushing hard. CS needs something concrete to tell clients.
Levvy
Stakeholder map created. Six stakeholders mapped with stance, influence level, and key concern. I've also added an engagement sequence and key tensions section based on the dynamics you described.
You
I want to give engineering something concrete to estimate against. Build a prototype UI for the permissions settings page — show the distinction between system roles and custom roles, and a permissions matrix. Use "Compliance Reviewer" as the example custom role with read + export access but no edit.
Levvy
Prototype added under the Prototype tab. Compliance Reviewer is marked as a custom role, highlighted in the role list, with export enabled and edit access off in the matrix. Code view is also available if you want to share the component spec with engineering.
Challenge Brief
PRD Draft
Stakeholder Map
Prototype
Whiteboard

Feature Prioritization for B2B SaaS —
Custom Role Permissions

PM Strategy ~45 min Intermediate
Scenario

You're the first product hire at a Series A B2B SaaS company. The engineering team (8 engineers) is at full capacity for the next quarter. Your top three enterprise clients are requesting custom role permissions — and sales has lost two deals this month citing this gap directly. You have one sprint planning window to make a recommendation. Where do you begin, and how do you frame your position?

Company Background
  • Series A B2B SaaS, 40 employees, product-led growth shifting toward enterprise sales motion
  • Engineering: 8 engineers, full capacity committed through next quarter
  • Three enterprise clients (fintech, healthcare, legal) requesting custom role permissions
  • Current permissions: Admin / Editor / Viewer — workspace-level only
Discovered Context
Client details

All three are 500+ seat deployments in regulated industries — fintech, healthcare, and legal. Two have explicitly cited compliance requirements as the driver. Combined ARR: $1.2M. Average contract age: 18 months, all currently in expansion discussions.

Current permissions model

Three roles: Admin, Editor, Viewer — workspace-level only. No project-level separation, no custom role creation.

Broader signal

Onboarding feedback from 14 accounts over the last 6 months. It surfaced under different labels: "access control," "sharing restrictions," "audit trail." Not always framed as permissions.