By Sagar Shankaran, Founder of CallSphere
Operations need RBAC: admin/manager/sales_rep, Admin/Agent/Requester. Vapi has no native non-tech UI. Compare CallSphere multi-user dashboards.
Key takeaways
Voice AI is not a single-engineer tool — it's an operations platform used by managers, supervisors, agents, compliance officers, and execs. CallSphere ships RBAC across every vertical: admin/staff for healthcare, admin/manager/sales_rep for sales, Admin/Agent/Requester for IT helpdesk, with audit_logs and per-role dashboards. Vapi.ai is a developer-first platform with no native non-tech UI for ops staff. This post walks through the role permission matrix, shows the dashboards, and gives you a procurement checklist.
A first deployment of a voice AI tool typically has one developer who can read transcripts, change prompts, and view costs. Six months in, the deployment has:
If the platform only offers a developer console, the customer either:
CallSphere ships per-vertical RBAC out of the box so the cluster of roles above maps to product roles directly.
Healthcare
Sales
Salon
After-Hours
IT Helpdesk
Vapi's platform is a developer console: API keys, agent configs, call logs. There is no native non-tech UI for ops:
To support an ops team, the customer typically:
This is a multi-month engineering project on top of the voice AI itself.
graph TB
subgraph Healthcare
HCA[Admin] -->|view| HCAUDIT[audit_logs]
HCA -->|view| HCRAW[raw transcripts]
HCA -->|view| HCDASH[dashboards]
HCS[Staff] -->|view| HCDASH
HCS -->|view| HCAPPT[appointments]
HCS -.no.-x HCRAW
end
subgraph Sales
SA[Admin] -->|view| SAUDIT[audit_logs]
SA -->|view| SDASH[real-time dashboards]
SM[Manager] -->|view| SDASH
SM -->|coach| SREP[Sales Rep]
SREP -->|view| SOWNCALLS[own calls]
SREP -.no.-x SAUDIT
end
subgraph IT[IT Helpdesk]
ITA[Admin] -->|view| ITUSAGE[ai_usage_logs]
ITAG[Agent] -->|view| ITASSIGN[assigned tickets]
ITREQ[Requester] -->|view| ITOWN[own tickets]
endThe matrix gives compliance officers a defensible "least privilege" answer for every dashboard view.
Hear it before you finish reading
Talk to a live CallSphere AI voice agent for real estate in your browser — 60 seconds, no signup.
| RBAC Capability | Vapi DIY | CallSphere |
|---|---|---|
| Per-role dashboards | Build yourself | Built-in |
| Healthcare admin/staff split | Build yourself | Default |
| Sales admin/manager/rep | Build yourself | Default |
| IT Admin/Agent/Requester | Build yourself | Default |
| Audit log of UI actions | Build yourself | Default |
| Team-scoped views | Build yourself | Default |
| Coaching / call monitoring tools | Build yourself | Sales vertical |
| SSO / SAML | Build yourself | Available |
| Time-to-ops-ready | Months | Day 1 |
Healthcare Admin: configures schedules, manages providers, reviews escalations, audits transcripts under BAA-controlled access, exports compliance evidence.
Healthcare Staff: views the day's appointments, the patient registry, dashboard KPIs (calls answered, no-shows, lead conversions). Cannot replay raw recordings or read full transcripts.
Sales Manager: monitors live calls in the WebSocket dashboard, coaches reps with whisper / barge tools, reviews call_metrics and sales_rep_metrics, tunes routing rules.
Sales Rep: sees own queue, own conversion metrics, own coaching history. Cannot see other reps' raw calls.
IT Admin: reviews ai_usage_logs (cost, throughput), manages knowledge base, sets up routing.
IT Requester: opens tickets, tracks own ticket status, sees own history.
The role split is the difference between a tool an engineer demos and a platform an operations org actually uses.
A 200-person services company piloted a Vapi-based intake bot with one developer. After six months:
Migration to CallSphere included role provisioning for 14 staff across 3 roles in the first week. Adoption became operational, not engineering.
Voice AI is an operations platform — and operations need roles. Book a CallSphere demo and walk through the multi-role dashboard, or check pricing.
Yes. Each vertical's defaults can be extended with custom roles via configuration. Permissions are expressed as scopes that map to API routes and UI components.
Yes. SAML SSO and OIDC are available on enterprise plans, with role mapping from IdP groups.
Yes. The audit_logs table captures every privileged UI action with user_id, action_type, target, IP, and timestamp.
Manager views are team-scoped by default. Cross-team views require admin role or explicit grant, which is logged.
Yes — prompt updates, routing changes, and agent config edits are all audit-logged with diff and committer.
CallSphere's RBAC is scope-based. Each role is composed of one or more scopes:
| Scope | Description |
|---|---|
| transcripts:read:raw | View raw transcripts and listen to recordings |
| transcripts:read:redacted | View redacted transcripts only |
| analytics:read | View dashboards and analytics |
| analytics:export | Export analytics data |
| audit:read | View audit logs |
| users:manage | Add / remove users, change roles |
| settings:write | Change tenant configuration |
| billing:read | View billing and usage |
| coaching:write | Whisper / barge / annotate calls |
| crm:webhook | Manage CRM integration |
Roles are bundles of scopes. Admin has all scopes; Manager has analytics:read + coaching:write + transcripts:read:redacted; Rep has transcripts:read:raw scoped to own_calls only.
Multi-tenancy is enforced at three layers:
Still reading? Stop comparing — try CallSphere live.
See the real estate AI agent handle a real call — complete, industry-specific, and live in your browser. No signup.
A bug at any layer would be a serious finding, so all three are tested in CI.
The audit_logs table captures:
Logs are append-only with no UPDATE / DELETE permissions for any application role. This satisfies HIPAA's tamper-evident audit log requirement.
Enterprise customers commonly integrate SSO via SAML or OIDC:
For Vapi-based stacks, the customer must build SSO integration into their custom dashboard, plus handle role mapping, provisioning, and session management.
MFA is required for admin roles by default. Options:
Admin actions can require step-up MFA — e.g., changing a billing setting or exporting sensitive data prompts a fresh MFA challenge regardless of session age.
Manager-level coaching features:
These features are scoped to the manager's team only — managers can't barge into another team's calls without admin grant.
Healthcare admin dashboards:
Healthcare staff dashboards:
Sales admin dashboards:
Sales manager dashboards:
Sales rep dashboards:
The typical role provisioning flow:
This is operations-team friendly. A Vapi-based custom dashboard typically requires a developer to provision new users.
The single best predictor of voice AI ROI is whether the operations team uses the tool. A voice AI that only the developer touches will:
A voice AI with multi-role dashboards and operational adoption:
That's why RBAC + dashboards aren't a "nice to have" — they're the difference between a demo and a deployment.
Written by
Sagar Shankaran· Founder, CallSphere
LinkedInSagar Shankaran is the founder of CallSphere, where he builds production AI voice and chat agents deployed across healthcare, hospitality, real estate, and home services. He writes about agentic AI, LLM engineering, and shipping voice agents that handle real calls in production.
See how AI voice agents work for your industry. Live demo available -- no signup required.
Reconciling 5+ monthly invoices is a procurement nightmare. Here is the operational cost of multi-vendor voice AI — and the consolidation story.
CallSphere ships multi-tenant practices natively. Deploying 50 clinics on Vapi means 50 manual setups or building a multi-tenant layer. The cost breakdown.
CallSphere auto-scores every call: sentiment -1.0 to 1.0, lead 0-100, intent, satisfaction, escalation. Vapi gives you raw recordings. Here is the analytics pipeline.
Every inbound call gets a 0-100 lead score in CallSphere. Vapi has no native scoring. See the rubric, pipeline, and CRM integration here.
Tenants, leases, rent ledger, maintenance — all built into CallSphere Real Estate. On Vapi, build it yourself. Full tenant lifecycle breakdown.
At 100K minutes/month, Vapi customers spend $30K+ on direct vendors alone. CallSphere's Scale tier covers it flat. Here is the math.
© 2026 CallSphere Inc. All rights reserved.
Made within San Francisco
Watch how CallSphere handles real customer calls, schedules appointments, and processes payments — live.
Try Live DemoBook a DemoCalculate Your ROI