Staff Management controls who can log into Mumara Campaigns and what they're allowed to do. It has three sections under Setup → Staff Management: Administrators, Admin Roles, and Profile Fields.
Administrators — create staff accounts with a name, login email, password, and an assigned role. You can also set optional per-user resource limits: hourly sending rate, daily and monthly sending limits, and maximum concurrent sending threads. When deleting an account you choose Soft Delete (deactivate, keep data) or Hard Delete (permanent removal, with the option to transfer the user's lists and campaigns to another administrator).
Admin Roles — define what each role can access using a hierarchical permission tree covering lists, contacts, segments, broadcasts, drips, triggers, statistics, sending infrastructure, web forms, templates, tools, API, and settings. Checking a category enables all its child permissions; changes to a role apply immediately to everyone assigned to it.
Profile Fields — custom fields (text, dropdown, checkboxes, date, and more) that appear on the My Profile page for logged-in system users. These are separate from contact custom fields, which live under Lists & Contacts.
Worth knowing: create roles before creating administrators; the built-in Super Administrator role and primary admin account cannot be edited or deleted; a role can't be deleted while administrators are still assigned to it; and leaving the password blank when editing an account keeps the existing password.