Permissions Matrix
A complete breakdown of what each role can do.
Permissions Matrix
This table shows which actions each role can perform. A checkmark (✓) means the role has that permission.
Legend:
- All — All users (Staff, Shift Manager, Admin, Owner)
- Manager+ — Shift Manager, Admin, Owner
- Admin+ — Admin, Owner
- Owner — Owner only (when explicitly noted)
Dashboard
| Action | All |
|---|---|
| View dashboard | ✓ |
All roles can access the dashboard. The content shown depends on the role (e.g., managers see team stats; staff see personal stats).
Tasks
| Action | All | Admin+ |
|---|---|---|
| View tasks | ✓ | |
| Create / Edit / Delete | ✓ | |
| Bulk actions | ✓ |
All users can view tasks. Creating, editing, deleting, and bulk actions (e.g., bulk status change) require Admin or Owner.
Punches (Clock In/Out)
| Action | All | Manager+ |
|---|---|---|
| Clock in/out | ✓ | |
| Delete own | ✓ | |
| Auto clock-out | ✓ |
All users can punch in and out and delete their own punches. Auto clock-out (clocking out users who forgot) is available to Shift Managers, Admins, and Owners.
Timesheets
| Action | All | Manager+ |
|---|---|---|
| View own | ✓ | |
| View all | ✓ |
All users can view their own timesheet. Shift Managers, Admins, and Owners can view timesheets for everyone in their scope.
Schedule
| Action | All | Manager+ |
|---|---|---|
| View own schedule | ✓ | |
| Create/Edit shifts | ✓ | |
| Generate schedules | ✓ |
All users can view their own schedule. Creating, editing shifts and generating schedules require Shift Manager, Admin, or Owner.
Leaves
| Action | All | Admin+ |
|---|---|---|
| Request leave | ✓ | |
| Approve/Reject | ✓ | |
| View all (Manager+) | ✓ |
All users can request leave. Approving and rejecting leave requests require Admin or Owner. Managers can view leave requests for their store(s).
Corrections (Punch Corrections)
| Action | All | Admin+ |
|---|---|---|
| Request correction | ✓ | |
| Approve/Reject | ✓ | |
| View all (Manager+) | ✓ |
All users can request punch corrections. Approving and rejecting require Admin or Owner. Managers can view corrections for their store(s).
Documents
| Action | All |
|---|---|
| View documents | ✓ |
| Create documents | ✓ |
| Share | ✓ |
| Manage folders | ✓ |
All users with document access can view, create, share, and manage folders (within the bounds of folder permissions).
Chat
| Action | All |
|---|---|
| Access chat | ✓ |
| Create groups | ✓ |
| Manage rooms | ✓ |
All users with chat access can participate, create groups, and manage rooms they have access to.
Announcements
| Action | All | Admin+ |
|---|---|---|
| View | ✓ | |
| Create | ✓ | |
| Pin | ✓ |
All users can view announcements. Creating and pinning announcements require Admin or Owner.
Appointments
| Action | All | Admin+ |
|---|---|---|
| View | ✓ | |
| Manage | ✓ | |
| Configure settings | ✓ |
All users can view appointments (if enabled). Managing appointments and configuring appointment settings require Admin or Owner.
Users
| Action | Admin+ |
|---|---|
| View users | ✓ |
| Create/Edit/Delete | ✓ |
Only Admins and Owners can view, create, edit, and delete users.
Stores
| Action | All | Admin+ |
|---|---|---|
| View stores | ✓ | |
| Create/Edit/Delete | ✓ |
All users can view stores they're assigned to. Creating, editing, and deleting stores require Admin or Owner.
Contracts
| Action | Admin+ |
|---|---|
| View | ✓ |
| Create/Edit/Delete | ✓ |
Only Admins and Owners can manage contracts.
Settings
| Action | Admin+ |
|---|---|
| All settings | ✓ |
All settings pages (users, stores, contracts, leave types, attendance policies, task labels/statuses, appointment settings, etc.) are accessible only to Admins and Owners.
Audit Logs
| Action | Admin+ |
|---|---|
| View logs | ✓ |
Only Admins and Owners can view audit logs.
Exceptions
| Action | Manager+ |
|---|---|
| View | ✓ |
| Detect | ✓ |
| Resolve | ✓ |
Shift Managers, Admins, and Owners can view, detect, and resolve attendance exceptions (e.g., missed punches, late clock-ins).
Reports
| Action | Manager+ |
|---|---|
| View reports | ✓ |
Shift Managers, Admins, and Owners can view reports for their store(s) or company-wide.