Roles & Permissions
Company Roles
Owner, Admin, and Viewer roles explained.
Company Roles
Company roles apply to your entire organization. They control who can manage settings, users, stores, and company-wide data. There are three company roles in Arbeon.
Owner
The Owner has full control over the company. There is only one Owner per company.
What Owners Can Do
- Manage all settings — Users, stores, contracts, leave types, attendance policies, task configuration, appointment settings, and more
- Manage users — Create, edit, deactivate, and delete user accounts
- Manage stores — Create, edit, and delete stores
- Transfer ownership — Assign another Admin as the new Owner (the previous Owner becomes an Admin)
- Delete the company — Permanently remove the company and all its data
- Approve and reject — Leave requests, punch corrections, and other approval workflows
- View everything — Schedules, timesheets, tasks, documents, chat, audit logs, and reports
Owner-Only Actions
- Transfer ownership to another Admin
- Delete the company
Admin
Admins can manage most aspects of the company but cannot transfer ownership or delete the company. Organizations often have multiple Admins.
What Admins Can Do
- Manage users — Create, edit, deactivate, and delete user accounts
- Manage stores — Create, edit, and delete stores
- Manage settings — Contracts, leave types, attendance policies, task labels and statuses, appointment settings
- Approve and reject — Leave requests and punch corrections
- Manage announcements — Create and pin announcements
- Manage appointments — View and manage appointments, configure appointment settings
- View audit logs — See who changed what and when
- View all data — Schedules, timesheets, tasks, documents, chat, and reports
What Admins Cannot Do
- Transfer ownership — Only the Owner can transfer ownership
- Delete the company — Only the Owner can delete the company
- Remove the Owner — Only the Owner can transfer ownership; Admins cannot demote the Owner
Viewer
Viewers have read-only access to company data. They can see information but typically cannot create, edit, or delete resources.
What Viewers Can Do
- View schedules — See shift schedules across stores
- View timesheets — See time tracking data
- View tasks — See tasks (and may be able to update tasks assigned to them, depending on configuration)
- View documents — Access shared documents and folders
- Use chat — Participate in conversations
- View announcements — Read posted announcements
What Viewers Cannot Do
- Create or edit users, stores, or contracts
- Change settings
- Approve leave or corrections
- Create or pin announcements
- Manage appointments or appointment settings
- Access audit logs (in most configurations)
Viewer is useful for regional managers, auditors, or external stakeholders who need visibility without the ability to make changes.