Authorization

Authorization defines what a user can or can't do after they get access to your application — see Authentication for the login side. This page covers the one admin-settings task specific to authorization: setting default roles for new accounts. For the full model — how admin rights and role restrictions combine, the restriction structure, and worked examples — see Authorization.

Default Roles for New Users

Requires the appSettingSchemasModify admin right.

1. Navigate to App Settings
2. Set Default Roles — the roles automatically assigned to every new account
3. Save

There is no "default admin rights" setting — new users always start with no admin rights. Grant rights per user from their profile after the account is created.

Typical Configurations:

Field Worker:

• Default roles: ["Field Workers"]
• Admin rights granted on the user after creation: reportsCreate

Office Coordinator:

• Default roles: none
• Admin rights granted on the user after creation: workOrdersCreate, stockItemsCreate, stockItemsUpdate

No Auto-Grant (Manual Review):

• Default roles: none
• Admins manually assign roles and rights after account review.