What Each Role Can Do

1. 1

   Go to ConsoleSettingsRoles.

2. 2
   Read the card for each role: who it's for, what it can do and which apps it uses.
3. 3
   Scroll to What each role can do to see every permission, role by role.

The built-in roles:

• Owner: everything, including billing, transferring ownership and closing the organisation. One per organisation.
• Admin: everything except ownership and closing the organisation.
• Site admin: what an Admin can do, for their own sites only.
• HR: people's records, attendance everywhere, leave, timesheets and the payroll export. Not billing, security or settings.
• Finance: pays and reconciles. Sees no HR records or pay. Only the Owner gives it.
• Receptionist: checks visitors in and out, invites for any host, logs deliveries and starts an emergency alert.
• Security lead: what a receptionist can do, plus the watchlist, roll calls and the audit trail for their sites.
• Guard: scans passes, checks people in and out at the gate, logs vehicles and calls hosts.
• Host: invites their own visitors, approves arrivals and manages their bookings.
• Employee: clocks in and out, requests leave and sees their own attendance.
• Auditor: reads reports, the visit history and the audit trail, and changes nothing.

Good to Know

• Roles are given on each person's page in People, not here.
• Who can make QR codes is set separately, under ConsoleQR codes.

If Something Goes Wrong

• No role fits exactly. Choose the role with the least access that covers the work. A line manager sees their own team whatever their role.
• You can't open Roles. Your role can't see who signs in. Ask an Owner or Admin.