Navigating through Account Settings
Open Settings from the gear icon at the bottom of the navigation rail. The Settings panel is organized into four areas:
- My Profile — your personal account and notification preferences.
- Workspace — General, Members, Roles, and Groups.
- Features — Integrations and Data Models.
- Security — API Keys.
My Profile
The My Profile page manages your personal information and how the app behaves for you.
- Profile picture: Under Avatar, click your picture to change it.
- User Details: Set the First Name and Last Name that appear across the platform.
- Appearance: Choose how the app looks to you — Light, Dark, or System.
- Email Notifications: Configure how you receive email alerts. For example, toggle Task Notifications to be alerted about upcoming and overdue tasks. Task alerts are sent daily for incomplete tasks past due or due within the next 2 days.
Workspace
General
As an Admin, you can configure workspace preferences and member permissions across several categories:
- Company Website: Add your company URl to tailor AI recommendations across discovery, chat, and more.
- Data & Privacy: Manage workspace exports, file uploads, and integrations.
- CRM Settings: Configure notes, associated contacts, organizations, and meetings.
- Tasks: Manage tasks directly tied to contracts or organizations.
- AI Actions: Allows Ai to create pipeline records, tasks, notes, ect.
- Workspace Data Search: Allows Chat to search your workspace data.
Note: Pryzm does not use your data to train our AI across any of our modules.
Adding members
Manage who has access to your workspace from Settings → Workspace → Members. The Members page lists everyone in your workspace with their name, email, role, and groups, and is where you invite new people, change roles, and remove or replace users.
The page shows a searchable list of every member. Each row displays the person’s name and email, their assigned role (such as Admin, Editor, or Viewer), buttons to Add Role and Add Group, and a ⋯ menu for more actions. The total count appears at the bottom of the list (for example, “19 members”). Use the Search members… box to quickly find someone.
On the Members page, click + Add Member in the top-right corner. The Invite Members dialog opens.
Type the person’s email address in the Email field (for example, name@example.com) and choose a Role from the dropdown. New invitees default to Viewer.
To invite several people at once, click + Add another and fill in each additional email and role.
Click Send Invitations. Each person receives an email invitation to join your workspace. To close the dialog without inviting anyone, click Cancel.
Pryzm uses a Role-Based Access Control (RBAC) system for granular workspace permissions. A user can hold multiple roles, and each role carries its own rules that determine what they can access.
Removing or replacing a user
Removing a user from the workspace and replacing them are part of the same flow: when you remove someone, you must choose a replacement who inherits their work, so nothing is lost or orphaned.
Find the person in the Members list and click the ⋯ menu at the end of their row.
Select Remove from workspace. The Remove User from Workspace dialog opens.
Choose a Replacement user from the dropdown. This field is required. All objects the removed user owns and items they are assigned will be transferred to the selected user, and the replacement user will also gain access to any objects the removed user could access.
Click Remove User to complete the removal and transfer. Click Cancel to keep the user in the workspace.
Removing a user transfers everything they own and are assigned to the replacement user, and grants the replacement access to objects the removed user could reach. Choose the replacement carefully before confirming.
To replace one team member with another — for example, when someone leaves and a colleague takes over their work — use this same flow and select the colleague as the replacement user.
Roles
The Roles page is where you define what members can do. Select Create Role in the right hand corner to add a custom role, or edit an existing one.
Every workspace includes three default roles:
- Admin: Can manage everything in the workspace.
- Editor: Can manage most things, with restrictions on higher-security features.
- Viewer: Read-only access to everything in the workspace.
You can also create custom roles for specific needs — for example, a “BD Consultant” role for external teammates working on your BD campaigns.
For each role, the table shows the Users assigned to it, the Groups it applies to, and its Rules (the per-module access the role grants).
How rules work (and the per-role breakdown)
Each role’s permissions are a set of Rules. A rule corresponds to a module (Chat, Notes, Pipelines, Portfolios, Integrations, Orion, Teams, etc.), and within each module a set of actions can be toggled. Each rule card shows the module name, an X/Y actions enabled count, the specific actions on (or All Actions), and sometimes a scope tag like All Pipelines.
To change them: open a role → scroll to Rules → click a module to toggle individual actions, or click + Add Rule to grant another module.
Admin — full access
| Module | Actions enabled |
|---|
| All Modules | All Modules (master grant covering every feature) |
| Teams | Create, Delete, Edit, View Teams (4/4) |
| (all other modules) | Full access via the All Modules grant |
Editor — manage most, restricted on security features
| Module | Enabled | Notes |
|---|
| Chat | 4/4 — All Actions | Full access |
| Integrations | 1/2 — Push to Integration | Restricted |
| Notes | 2/2 — All Actions | Full access |
| Orion | 4/4 — All Actions | Full access |
| Pipelines | 5/5 — Create, Delete, Edit, Export, View | Full (scoped to All Pipelines) |
| Portfolios | 7/7 — All Actions | Full access |
| Record Rules | 1/2 — View Record Rules | View only |
| Role-Based Access Control | 1/4 — View Roles | View only — can’t modify roles |
| Teams | 1/4 — View Teams | View only — can’t manage teams |
The “restrictions on higher-security features” show up here: Editors can view Roles, Teams, and Record Rules but not modify them, and have only partial Integrations access. Admins can only modify roles.
Groups
Groups organize workspace users and let you manage permissions at the group level. For example, you can create a “CRM Group” so specific users only have access to the CRM module.
- On the Groups page, select Create Group.
- Enter a Name (for example, Finance).
- Optionally add a Description of what the group is responsible for.
- Select Create Group.
Features
Integrations
Connect your email, calendar, Slack, or Salesforce accounts under Integrations. Select a connector and follow the prompts to authorize it.
Each connector opens its own detail page.
Using Google Gmail and Calendar as an example:
- Connected Account: Shows the authorized account, with a Manage option.
- Integration Status: Each service (such as Gmail and Google Calendar) shows as Active with a Disconnect option, so you can control each one independently.
- What you get and Privacy & Security explain the scope of access. Pryzm uses OAuth 2.0 and only accesses the data you authorize.
Note: Once connected, emails, calendar events, Slack, and contacts sync automatically. Contacts appear under Records → People, and related organizations are created under Records → Organizations based on email domains.
Connect your email and calendar in Pryzm
- Go to the Integrations page. Under the Personal Integrations section (“Connect your personal accounts to enhance your workflow”), you’ll see the email/calendar options.
- Pick your provider:
- Gmail + Calendar — connect your Google account to search email threads and sync calendar events.
- Outlook + Calendar — connect your Microsoft account for the same.
- Click the card for your provider. Hovering shows a → arrow indicating it’s clickable; clicking it kicks off the connection.
- Sign in with your provider. For Gmail, a “Sign in with Google → Choose an account to continue to Pryzm” screen appears. Select the account you want to connect (or Use another account to sign in with a different one). The Outlook path opens the equivalent Microsoft sign-in.
- Grant the requested permissions so Pryzm can read your email threads and sync calendar events.
- You’re returned to the Integrations page, and the card will show a green ✓ Connected badge — the same way the Email Relay card shows as connected in your workspace.
A couple of notes:
- These are personal integrations, so each user connects their own account; this is separate from the Workspace Integrations (Slack, Salesforce) lower on the page.
Integration Settings
Controlled by Admins, these settings determine how records are created and shared from an integration, and apply to all workspace members. Changes take effect immediately.
- Record Creation — control how contacts are automatically created from emails and calendar events:
- No Creation: No records are created automatically; events still associate with records you create manually.
- Selective (Recommended): Records are created only for contacts who email your workspace members or appear in their calendar events.
- All Contacts: Records are created for every contact in synced emails and calendar events.
- Sharing Visibility — control what email data team members can see on shared records:
- No Sharing: Threads are visible only to the owner.
- Metadata Only: Members see subject lines, participants, and dates, but not the message body.
- Full Visibility: The full body, subject line, and attachments are shared.
- Email Filters: Use an Allowlist or Blocklist to control which domains and addresses are processed.
- Auto-Enrich Contacts: Enrich contact data with company info, job titles, and social profiles.
- Forwarded Email Discovery: When a member forwards an email, automatically extract and store the original sender and recipients as thread participants, making forwarded contacts searchable in contact records.
- Email & Calendar Integration Access: Choose Unrestricted (all members can connect) or Restricted (only approved members can connect) for email and calendar integrations.
- Team Integrations: Admins can see which members have connected and which integration they completed.
Salesforce
Connect Salesforce to keep your CRM data aligned across both systems. Select Salesforce from the available connectors and authorize the connection. View the Salesforce Integration page to integrate your data.
Email Relay
Push individual emails into Pryzm using a bespoke relay address. Add it to the To, CC, or BCC line to trigger enriched contact creation. Select Email Relay → Generate Email to begin.
Slack
Connect Pryzm to your Slack workspace to receive real-time updates. Once integrated, Pryzm sends notifications for Feeds, Opportunities, and any CRM alerts you configure.
- Go to Integrations under Workspace Features.
- Select Slack from the available connectors.
- Select Connect and authorize the Slack workspace where you want to receive alerts.
Data Models
Data Models define the record types and pipelines in your workspace. Your People and Organizations records are data models, and so is every pipeline — for example, BD Prospecting, Commercial Pipeline, Customer Lifecycle, External Event Planning, Gov Pipeline, and Pryzm Hill Campaigns.
Adding a New Object
Every record type and pipeline in Pryzm is an object (also called a data model). To add a new one:
- On the Data Models page, select Create data model.
- Pick a template to start from, or choose Create your own to build from scratch.
- Open the new object to configure its Attributes, Appearance, Policies, Permissions, and other settings.
Built-in templates include:
- Deals — a capture pipeline based on the Shipley method, from inbound identification through procurement and close.
- Customer Success — monitor customer health from onboarding through renewal.
- Fundraising — track investor outreach from research through term sheets.
- Commercial Sales — a classic B2B sales pipeline from lead generation to close.
- Press Outreach — manage pitches, follow-ups, and published coverage.
Choosing Create your own lets you define every attribute yourself. Once the object exists, build it out from the Attributes tab described below.
Configuring a Data Model
Open a data model to configure it. Its settings are organized into tabs:
- Configuration — the model’s core settings.
- Attributes — its fields and data structure.
- Appearance — how the model is displayed.
- Apps — connected apps for the model.
- Policies — automation and data policies.
- Permissions — who can access the model’s records.
- Webhooks — outbound HTTPS callbacks for the model.
Attributes let you customize the model’s fields. Select Create attribute and choose a field type to get started; drag attributes to reorder them. Core fields are marked as System and are locked. Available field types include:
| Field type | Use it for |
|---|
| Text | Notes, descriptions, or any text-based information |
| URL | Storing and linking to web addresses |
| Checkbox | A simple yes/no toggle for boolean values |
| Select | A set of predefined options to choose one from |
| Multi-select | Choosing multiple options from a predefined list |
| Workspace Member | Assigning a workspace member to the field |
| Number | Scores, quantities, or measurements |
| Currency | Monetary values like budgets, costs, or revenue |
| Percentage | Percentage values with automatic formatting |
| Rating | Rating items on a numeric scale |
| Date | Dates and times for scheduling and deadlines |
| Year | Year values |
| Formula | Computing values from other attributes automatically |
| Document | Rich text content in a document editor |
| Relationship | Linking the model to records in another model |
Attributes — edit the model’s fields and data structure
To edit or add attributes: open Settings (gear icon at the bottom of the navigation rail) → Features → Data Models, then open the data model you want (e.g., People, Organizations, or a specific pipeline). You can also reach a pipeline’s data model directly from its … menu next to the pipeline name → Data model settings.
- Go to the Attributes tab.
- Select Create attribute.
- Choose a field type.
- Save.
Edit Existing Attributes:
- On the Attributes tab, find the attribute you want to change.
- Select the attribute to open its settings.
- Edit what you need — its name, type-specific settings, and (for Select / Multi-select fields) add to the list of options and change icon appearance.
- Save your changes.
Reorder attributes
- Drag an attribute by its handle on the left hand side to move it up or down.
- The order here controls how fields appear on the record card.
Apply rules or approval requirements
- Open the attribute and add any rules or approval requirements that should apply when its value changes.
- Save. (Approval requests then surface in the pipeline’s top banner and on the affected record card.)
Delete an attribute
- Open the attribute (or use its row menu) and choose Delete.
A couple of things to know:
- System fields are locked. Core attributes are marked System and can’t be edited or deleted.
- Changes apply across the model. Edits to an attribute reflect on every record of that data model, so renaming or changing options updates all existing records’ fields.
How objects connect to each other
Objects don’t stand alone — they link to one another through the Relationship attribute, which is how data flows across your CRM. A relationship field on one object points to the records of another object, so related information stays connected in both places.
The default People and Organizations objects are the backbone most pipelines connect to. For example, the BD Prospecting pipeline includes a Contacts attribute (Relationship → Person) linking each deal to the people involved, and an Organizations attribute (Relationship → Organization) linking each deal to the companies involved. Because those links are live, opening a deal shows its associated contacts and organizations, and opening a person or organization shows the deals and records they’re tied to.
To connect two objects:
- Open the object you want to add the link to and go to its Attributes tab.
- Select Create attribute and choose the Relationship field type.
- Choose the object whose records this field should link to (for example, People or Organizations).
- Save the attribute. You can now associate records from that object on any record of this one.
Appearance — edit how records look across the app
- On the Appearance tab, find the Record Page card and click Open designer to edit the layout people see when they open a record (it edits live, with placeholder values).
- In the designer, edit any of these:
- Click + Add a stage banner to put a stage progress bar across the top.
- Click + Add widget to surface a specific field (e.g., Competition Level).
- Click + Add a section to add a grouped app block (Tasks, Notes, Files, Deal Plan, etc.).
- Click + Add tab to add a tab, choosing a built-in tab or one from a relationship (e.g., Organizations); drag tabs to reorder.
- Back on the Appearance tab, under Card fields, click + Add field to choose what shows beneath the title; drag the handles to reorder, or click the trash icon to remove a field.
- Under Card icon, click + Choose source to change the icon.
- Under Creation panel, click + Change document to attach a doc shown beside the create form (or Reset to clear it).
Apps — choose which apps appear on records and how they pull data
Apps control which related items (Tasks, Notes, Files, etc.) surface on records of this model and where each one gets its data. Sources can chain up to 3 relationship hops (for example, Pursuits → Deals → People), with up to 10 paths per app.
To get there: open Settings (gear icon at the bottom of the navigation rail) → Features → Data Models, open the data model you want, and select the Apps tab.
Turn apps on or off
- On the Apps tab, use the toggle on the right of each app to control whether it appears on records — Tasks, Notes, Files, Meetings, Emails, Proposal, Products, and Orion.
Configure where an app’s data comes from
- Click the gear icon on an app to edit its sources — shown as Direct (items tied straight to the record) or, for example, 2 sources (items pulled through related records).
- Meetings and Emails are matched by email address, so use their source settings to pull in meetings and threads from related contacts.
Change how records pre-fill attributes from an opportunity (Data links)
The Data links section, below the app toggles, controls what gets copied over when someone creates a record from an opportunity. Each opportunity field you map to a pipeline attribute is filled in automatically at creation; anything left Not mapped is ignored.
Mappings are grouped by the type of opportunity the record came from — Contracts, Grants, and Foreign opportunities — and each group has its own table with two columns: the Opportunity field on the left and the Pipeline attribute it fills on the right.
- Scroll to Data links on the Apps tab.
- Find the opportunity group you want to edit (Contracts, Grants, or Foreign opportunities).
- Locate the Opportunity field row you want to change (e.g., Title, Posted date, Response deadline, Description, Points of contact, Government organization).
- In that row, open the Pipeline attribute dropdown and pick the attribute it should fill — for example, Title → Name, Posted date → Start Date, Response deadline → Close Date.
- To stop a field from pre-filling, set its dropdown to Not mapped.
- Click Save.
A couple of things worth knowing:
- Relationship fields resolve to linked records, not text. Points of contact maps to your Contacts attribute and links the matching People records; Government organization maps to Organizations and links the issuing agency.
- Each opportunity type maps independently. A Grant’s Application deadline and a Contract’s Response deadline can both point to Close Date, but you set them in their own tables — changing one doesn’t change the other.
- Mappings apply only at creation. They pre-fill a record the moment it’s created from an opportunity; changing them later doesn’t rewrite existing records.Policies — edit automation rules and notifications
- On the Policies tab, use the Rules / Notifications toggle (top right) to pick what you’re editing.
- To add or edit a Rule, click + Create rule, then choose a type: Require approval, Require a reason, or Require prerequisites.
- Configure the rule:
- When this happens: pick the trigger — Choice or status, Field changes, Record created, or No activity — and select the attribute it applies to.
- Require: set what’s needed (for approvals: Require approval from Any one / all, then + Add approver; for prerequisites: set the required fields and conditions).
- Only when (optional): click Add condition for an extra check on the record’s current state.
- Save the rule (e.g., Require approval), or click Cancel to discard.
- To edit notifications, switch to Notifications and choose Slack (post to a channel) or Email (send to a recipient).
Permissions — edit who can access the model’s records
- On the Permissions tab, set General access — the scope (e.g., Workspace) or a restricted setting.
- Choose the Default access level everyone with access gets (e.g., Editor or Viewer).
- Grant specific people their own access level, including Owner.
Webhooks
Each data model can send outbound HTTPS callbacks when its records change. Open a data model and select the Webhooks tab.
To create one, enter a Webhook name, choose the trigger event (for example, Record Created), enter your target HTTPS URL, and select Create.
Note: Only admins can create or deactivate webhook subscriptions. Webhook subscriptions are tied to a specific pipeline and managed in the Pryzm frontend.
Available event
Pryzm currently supports one outbound CRM webhook event. It is scoped to a single pipeline, and fires a signed POST request to your target URL when a new campaign is created in that pipeline.
| Event | When it fires | Scope |
|---|
campaign.created.v1 | After a new campaign is created | One pipeline (pipeline_id) |
A few things to know when creating one:
webhook_type currently supports only campaign.created.v1.
target_url must be a public HTTPS URL.
- Pryzm returns the signing
secret only once, when the webhook is created — store it when you receive the response.
Request body
Pryzm sends a POST request with this envelope:
{
"event": "campaign.created.v1",
"event_timestamp": "2026-04-09T14:23:11.000000+00:00",
"data": "<campaign record payload>"
}
The data object uses the same campaign shape returned by the External API’s Get Record by ID endpoint for campaign records. For the exact payload structure, see Get Record by ID and the Records API response shape.
Headers
Each outbound request includes:
| Header | Description |
|---|
Content-Type | Always application/json |
X-Pryzm-Event | Event name, currently campaign.created.v1 |
X-Pryzm-Event-Id | Unique event ID for this delivery |
X-Pryzm-Timestamp | Unix timestamp in seconds |
X-Pryzm-Signature | HMAC SHA-256 signature in the format t=<timestamp>,v1=<signature> |
Signature verification
Use the webhook secret returned at creation time to verify each request:
- Read the raw request body exactly as sent.
- Build the signed payload as
<timestamp>.<raw_body>.
- Compute the HMAC SHA-256 digest using your webhook secret.
- Compare the digest to
v1 from X-Pryzm-Signature.
import hashlib
import hmac
timestamp = request.headers["X-Pryzm-Timestamp"]
signature = request.headers["X-Pryzm-Signature"]
raw_body = request.get_data(as_text=True)
signed_payload = f"{timestamp}.{raw_body}".encode()
expected = hmac.new(WEBHOOK_SECRET.encode(), signed_payload, hashlib.sha256).hexdigest()
received = signature.split("v1=", 1)[1]
is_valid = hmac.compare_digest(expected, received)
Use X-Pryzm-Event-Id as a stable identifier for idempotency, logging, and delivery tracing; it is not part of the signature payload.
Delivery and retries
- Deliveries use a 5 second timeout, and redirects are not followed.
- Pryzm retries on network errors and on
429 and 5xx responses, but not on other 4xx responses.
- Retries use exponential backoff with jitter, starting at 120 seconds and capped at 1800 seconds, for up to 6 total attempts.
- If a webhook reaches 50 consecutive final-attempt failures, Pryzm deactivates it and emails the owner.
Versioning and migrations
Webhook events carry a version suffix (such as campaign.created.v1). When a payload schema changes, Pryzm releases a new version (such as campaign.created.v2) rather than modifying the existing one. Both versions run concurrently during a transition period so existing integrations are not disrupted, and Pryzm announces deprecation timelines in advance. To migrate, create a new subscription on the newer version, verify it, then deactivate the old one.
Security
API Keys
Establish an API for your Pipelines using Pryzm’s REST API. Visit How to use to review the documentation, or select + Create Key to configure one.
Note: Only admins can create API keys. Members without the required permissions will see an Access Denied message and should contact their workspace administrator.
SAML (SSO)
Enable Single Sign-On by selecting + Configure SAML and entering your connection portal details.
To enforce SAML SSO for your workspace:
- Open the SAML Configuration section (direct link).
- Select Edit on the SAML configuration page.
- Switch the Require SAML login toggle to ON.
- Confirm and select Save Changes.
Warning: Once SAML enforcement is on, users can only log in with SAML. Fully test your configuration before enabling this to prevent workspace lockout.