Arbeon Docs
Roles & Permissions

Permissions Matrix

A complete breakdown of what each role can do.

Permissions Matrix

This table shows which actions each role can perform. A checkmark (✓) means the role has that permission.

Legend:

  • All — All users (Staff, Shift Manager, Admin, Owner)
  • Manager+ — Shift Manager, Admin, Owner
  • Admin+ — Admin, Owner
  • Owner — Owner only (when explicitly noted)

Dashboard

ActionAll
View dashboard✓

All roles can access the dashboard. The content shown depends on the role (e.g., managers see team stats; staff see personal stats).


Tasks

ActionAllAdmin+
View tasks✓
Create / Edit / Delete✓
Bulk actions✓

All users can view tasks. Creating, editing, deleting, and bulk actions (e.g., bulk status change) require Admin or Owner.


Punches (Clock In/Out)

ActionAllManager+
Clock in/out✓
Delete own✓
Auto clock-out✓

All users can punch in and out and delete their own punches. Auto clock-out (clocking out users who forgot) is available to Shift Managers, Admins, and Owners.


Timesheets

ActionAllManager+
View own✓
View all✓

All users can view their own timesheet. Shift Managers, Admins, and Owners can view timesheets for everyone in their scope.


Schedule

ActionAllManager+
View own schedule✓
Create/Edit shifts✓
Generate schedules✓

All users can view their own schedule. Creating, editing shifts and generating schedules require Shift Manager, Admin, or Owner.


Leaves

ActionAllAdmin+
Request leave✓
Approve/Reject✓
View all (Manager+)✓

All users can request leave. Approving and rejecting leave requests require Admin or Owner. Managers can view leave requests for their store(s).


Corrections (Punch Corrections)

ActionAllAdmin+
Request correction✓
Approve/Reject✓
View all (Manager+)✓

All users can request punch corrections. Approving and rejecting require Admin or Owner. Managers can view corrections for their store(s).


Documents

ActionAll
View documents✓
Create documents✓
Share✓
Manage folders✓

All users with document access can view, create, share, and manage folders (within the bounds of folder permissions).


Chat

ActionAll
Access chat✓
Create groups✓
Manage rooms✓

All users with chat access can participate, create groups, and manage rooms they have access to.


Announcements

ActionAllAdmin+
View✓
Create✓
Pin✓

All users can view announcements. Creating and pinning announcements require Admin or Owner.


Appointments

ActionAllAdmin+
View✓
Manage✓
Configure settings✓

All users can view appointments (if enabled). Managing appointments and configuring appointment settings require Admin or Owner.


Users

ActionAdmin+
View users✓
Create/Edit/Delete✓

Only Admins and Owners can view, create, edit, and delete users.


Stores

ActionAllAdmin+
View stores✓
Create/Edit/Delete✓

All users can view stores they're assigned to. Creating, editing, and deleting stores require Admin or Owner.


Contracts

ActionAdmin+
View✓
Create/Edit/Delete✓

Only Admins and Owners can manage contracts.


Settings

ActionAdmin+
All settings✓

All settings pages (users, stores, contracts, leave types, attendance policies, task labels/statuses, appointment settings, etc.) are accessible only to Admins and Owners.


Audit Logs

ActionAdmin+
View logs✓

Only Admins and Owners can view audit logs.


Exceptions

ActionManager+
View✓
Detect✓
Resolve✓

Shift Managers, Admins, and Owners can view, detect, and resolve attendance exceptions (e.g., missed punches, late clock-ins).


Reports

ActionManager+
View reports✓

Shift Managers, Admins, and Owners can view reports for their store(s) or company-wide.

On this page