Roles

A role is a set of restrictions. Everyone given the role is blocked from the actions its restrictions name, on the records its restrictions match. A role is also a team: the people who hold it are the people it describes.

The Roles window

Admin › People › Roles opens the Roles window. The roles are listed on the left and the one you select is on the right.

• Search and Filters above the list narrow it by name, by who holds the role, by what its restrictions cover, and by deleted roles. Each applied filter shows as a chip.
• Add role starts a new role. The list's ⋯ holds Import roles and the exports to CSV and Excel.
• A role's row ⋯ holds Clone, Delete and Restore.
• Tick roles to change them together.

Edits wait in the window, and the upload button above the list counts them. Save writes the role on screen, and Save all writes every changed role. Moving to another role keeps your edits to the one you left. Undo and Redo step through them.

A role's form

A role has a Name, an Owner and Tags. People given the role can apply its tags to the work they touch.

You give a person a role from their record in People.

Restrictions, as sentences

The Restrictions section reads as plain language:

Members of the Field Technician role can do everything except: • Delete Work Order records where name is "freckle". • Create & Edit Work Order records where status is any of "completed", "in-progress".

Each line is one restriction. A red dot marks a restriction that blocks something. A grey dot marks one that blocks nothing yet, because no action is chosen.

A line's ⋯ opens the restriction's form:

• Model: the kind of record, such as Work Order, Site or Feature. Feature also covers assets.
• Field: the field on that record to test. The list offers the model's fields and the properties its records commonly carry. You can also type one.
• Comparison: is, is not, is greater than, is at least, is less than, is at most, contains, is any of, is none of, or is between.
• Value: one value, a list for is any of and is none of, or two bounds for is between.
• Blocked actions: Create, Read, Edit and Delete. A chosen action turns red.
• Remove deletes the restriction.

Add restriction adds a line and opens its form. Closing a form you never filled in removes the line.

Limiting a role to some records

To give a group authority over some records and not others:

1. Tag those records, for example north.
2. Give the group's role a restriction on the tags field, with the comparison is not and the value north, blocking the actions you want kept to those records.

The line under the sentence then reads the other way round: So members can read only Feature records where tags is north. Each role a person holds narrows further. Two such roles leave only the records carrying both tags. To cover two areas with one role, use is none of with both tags.