Roles and permissions

ToolboxFM decides what you can do from your role, never from a check on the screen you are looking at. This page is the complete list.

app.toolboxfm.com

Where roles are set. The permission matrix below is what each of those roles can do.

The roles

Role	Scope	Priority
Head Office	Organisation-wide	1 (highest)
Project Supervisor	One project	2
Subcontractor Supervisor	One project	3
User	One project	4

Priority matters when somebody holds more than one role: ToolboxFM resolves them to the highest-privilege role they hold.

Who can grant what

You are	You can give
Head Office	Any role, including Head Office
Project Supervisor	Project Supervisor, Subcontractor Supervisor, User

Permission matrix

Filter by permission name, or untick a role to take it out of the table.

Filter permissions

Show roles

Head OfficeProject SupervisorSubcontractor SupervisorUser

Permission	Applies to	Head Office	Project Supervisor	Subcontractor Supervisor	User
Zones
View zoneszone:view	Per project	✓Head Office can	✓Project Supervisor can	✓Subcontractor Supervisor can	✓User can
Create zoneszone:create	Per project	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Edit zoneszone:update	Per project	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Add zone photoszone:photo_add	Per project	✓Head Office can	✓Project Supervisor can	✓Subcontractor Supervisor can	—User cannot
Open or close a zonezone:status_change	Per project	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Delete zoneszone:delete	Per project	✓Head Office can	—Project Supervisor cannot	—Subcontractor Supervisor cannot	—User cannot
Work activities
Create work activitieswork_activity:create	Per project	✓Head Office can	✓Project Supervisor can	✓Subcontractor Supervisor can	—User cannot
View work activitieswork_activity:view	Per project	✓Head Office can	✓Project Supervisor can	✓Subcontractor Supervisor can	✓User can
Edit work activitieswork_activity:update	Per project	✓Head Office can	✓Project Supervisor can	✓Subcontractor Supervisor can	—User cannot
Approve work activitieswork_activity:approve	Per project	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Cancel work activitieswork_activity:cancel	Per project	✓Head Office can	✓Project Supervisor can	✓Subcontractor Supervisor can	—User cannot
Day board
Open the day boardday_board:view	Per project	✓Head Office can	✓Project Supervisor can	✓Subcontractor Supervisor can	—User cannot
See subcontractor names on the day boardday_board:view_contractors	Per project	✓Head Office can	✓Project Supervisor can	✓Subcontractor Supervisor can	—User cannot
Project diary
Read diary entriesproject_diary:view	Per project	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Write diary entriesproject_diary:create	Per project	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Comment on diary entriesproject_diary:comment	Per project	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Comments
Delete any commentcomment:delete	Per project	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
People
View usersuser:view	Either	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Invite usersuser:invite	Either	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Edit usersuser:update	Either	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Change user rolesuser:elevate	Either	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Subcontractors
View subcontractorssubcontractor:view	Either	✓Head Office can	✓Project Supervisor can	✓Subcontractor Supervisor can	—User cannot
Add and edit subcontractorssubcontractor:manage	Per project	✓Head Office can	✓Project Supervisor can	—Subcontractor Supervisor cannot	—User cannot
Projects
View projectsproject:view	Organisation	✓Head Office can	—Project Supervisor cannot	—Subcontractor Supervisor cannot	—User cannot
Create projectsproject:create	Organisation	✓Head Office can	—Project Supervisor cannot	—Subcontractor Supervisor cannot	—User cannot
Edit projectsproject:update	Organisation	✓Head Office can	—Project Supervisor cannot	—Subcontractor Supervisor cannot	—User cannot
Delete projectsproject:delete	Organisation	✓Head Office can	—Project Supervisor cannot	—Subcontractor Supervisor cannot	—User cannot
Organisation
View organisation detailstenant:view	Organisation	✓Head Office can	—Project Supervisor cannot	—Subcontractor Supervisor cannot	—User cannot
Edit organisation detailstenant:update	Organisation	✓Head Office can	—Project Supervisor cannot	—Subcontractor Supervisor cannot	—User cannot
Manage billingtenant:billing	Organisation	✓Head Office can	—Project Supervisor cannot	—Subcontractor Supervisor cannot	—User cannot
Change organisation settingstenant:settings	Organisation	✓Head Office can	—Project Supervisor cannot	—Subcontractor Supervisor cannot	—User cannot
Manage single sign-onsso:manage	Organisation	✓Head Office can	—Project Supervisor cannot	—Subcontractor Supervisor cannot	—User cannot

Note

The scope column is the part people get wrong. A permission scoped to one project is checked against your role on the project in question, so being a Project Supervisor at one job gives you nothing at another.

Note

work_activity:update lets a Subcontractor Supervisor file a close-out for their own subcontractor’s activity, but they cannot change it after submission. Only a Project Supervisor or Head Office can edit a submitted close-out.

Related

• Users and roles