Users, roles & permissions

Overview

Centralized control over who can do what across the portfolio. Standard roles cover most cases; custom roles let you fine-tune.

Who uses this

Administrators.

Open the feature

Administration → Users & roles.

Step-by-step

1. Go to Roles & permissions.
2. Pick a standard role and click Duplicate to make a custom version.
3. Toggle module access and per-action rights (view, create, edit, delete).
4. Assign the role to users from Users.
5. Track all changes in Audit history.

Settings & permissions

Only administrators can change roles. Some sensitive actions (e.g. delete user) require a second admin to approve if dual-control is enabled.

Multi-building tips

Roles are global definitions; assignments are per-building.

Notifications

Users are notified when their role changes.

Reports & exports

Permission report — who can do what, exported for board review.

Troubleshooting

• Permission too broad/narrow. Adjust the role rather than special-casing the user.

FAQ

Can we require 2FA for admins? Yes — force in Security settings.

Glossary

• Dual control — two admins required for high-risk actions.