Arbeon Docs
Roles & Permissions

Permissions Matrix

A complete breakdown of what each role can do.

Permissions Matrix

This table shows which actions each role can perform. A checkmark (✓) means the role has that permission.

Legend:

  • All — All users (Staff, Shift Manager, Admin, Owner)
  • Manager+ — Shift Manager, Admin, Owner
  • Admin+ — Admin, Owner
  • Owner — Owner only (when explicitly noted)

Dashboard

ActionAll
View dashboard

All roles can access the dashboard. The content shown depends on the role (e.g., managers see team stats; staff see personal stats).


Tasks

ActionAllAdmin+
View tasks
Create / Edit / Delete
Bulk actions

All users can view tasks. Creating, editing, deleting, and bulk actions (e.g., bulk status change) require Admin or Owner.


Punches (Clock In/Out)

ActionAllManager+
Clock in/out
Delete own
Auto clock-out

All users can punch in and out and delete their own punches. Auto clock-out (clocking out users who forgot) is available to Shift Managers, Admins, and Owners.


Timesheets

ActionAllManager+
View own
View all

All users can view their own timesheet. Shift Managers, Admins, and Owners can view timesheets for everyone in their scope.


Schedule

ActionAllManager+
View own schedule
Create/Edit shifts
Generate schedules

All users can view their own schedule. Creating, editing shifts and generating schedules require Shift Manager, Admin, or Owner.


Leaves

ActionAllAdmin+
Request leave
Approve/Reject
View all (Manager+)

All users can request leave. Approving and rejecting leave requests require Admin or Owner. Managers can view leave requests for their store(s).


Corrections (Punch Corrections)

ActionAllAdmin+
Request correction
Approve/Reject
View all (Manager+)

All users can request punch corrections. Approving and rejecting require Admin or Owner. Managers can view corrections for their store(s).


Documents

ActionAll
View documents
Create documents
Share
Manage folders

All users with document access can view, create, share, and manage folders (within the bounds of folder permissions).


Chat

ActionAll
Access chat
Create groups
Manage rooms

All users with chat access can participate, create groups, and manage rooms they have access to.


Announcements

ActionAllAdmin+
View
Create
Pin

All users can view announcements. Creating and pinning announcements require Admin or Owner.


Appointments

ActionAllAdmin+
View
Manage
Configure settings

All users can view appointments (if enabled). Managing appointments and configuring appointment settings require Admin or Owner.


Users

ActionAdmin+
View users
Create/Edit/Delete

Only Admins and Owners can view, create, edit, and delete users.


Stores

ActionAllAdmin+
View stores
Create/Edit/Delete

All users can view stores they're assigned to. Creating, editing, and deleting stores require Admin or Owner.


Contracts

ActionAdmin+
View
Create/Edit/Delete

Only Admins and Owners can manage contracts.


Settings

ActionAdmin+
All settings

All settings pages (users, stores, contracts, leave types, attendance policies, task labels/statuses, appointment settings, etc.) are accessible only to Admins and Owners.


Audit Logs

ActionAdmin+
View logs

Only Admins and Owners can view audit logs.


Exceptions

ActionManager+
View
Detect
Resolve

Shift Managers, Admins, and Owners can view, detect, and resolve attendance exceptions (e.g., missed punches, late clock-ins).


Reports

ActionManager+
View reports

Shift Managers, Admins, and Owners can view reports for their store(s) or company-wide.

On this page