Access profiles and permissions
Five access profiles seed a fine-grained permission set you can tune per person — with guardrails nobody can bypass.
Rufineous Emmanuel
Last Update a day ago
The five access profiles
- Owner — the workspace's ultimate authority. Owners hold every permission implicitly, including settings and billing. A workspace always keeps at least one active owner.
- Office admin — full day-to-day management: users, jobs, scheduling, forms, clients, fleet, assets, chat and documents.
- Supervisor — the same management set as an office admin by default, typically tuned down. On a phone, supervisors with management permissions can flip between the field app and the admin view.
- Field worker — the field app: their day, their work, capture and chat. No management access.
- Custom — start from nothing and pick exactly the permissions this person needs.
Fine-tuning with permission chips
In Edit access & role, the profile seeds a set of permission chips you can then adjust — Manage jobs, Manage dispatch, Manage users, Manage forms, Manage compliance, Manage time clock, Manage leave, Manage chat, Manage help desk, Manage settings, Manage billing, View audit trail, View evidence, Read sensitive info and more.
A few worth calling out:
- Manage dispatch — scheduling and assignments, plus the escalation alerts when workers don't confirm.
- Manage compliance — authorisations/permits, defect control and AI review decisions.
- Read sensitive info — national identifiers, right-to-work, emergency contacts. Separate from Manage users on purpose, and every view of sensitive info is recorded in the audit trail.
- Manage settings — branding, modules and alert rules (owner-only by default).
The guardrails
These are enforced by the server, not just the screen:
- "You can only grant permissions you hold yourself." — nobody can hand out power they don't have, and nobody can escalate themselves.
- "Only an owner can grant owner access." and only an owner can modify an owner's account.
- "The workspace must keep at least one active owner."
- "You cannot deactivate your own account."
- Owner and office admin accounts require an email address.
Note that an owner's chips don't matter — owners pass every check regardless, by design.
What people see
Navigation follows your workspace's enabled modules, not personal permissions — someone without Manage users may still see the Users section but can't load or change anything in it. Real enforcement always happens on the server.
Tip: prefer profiles over one-off custom sets — "Supervisor minus Manage users" is easier to reason about in a year's time than twelve bespoke chip combinations.