Permissions Reference
A complete list of every permission in OpsOS, grouped by module, with a description of what each one allows.
Permissions are managed in The Permissions Manager. For an explanation of how roles, inheritance, and direct grants work, see Roles and Permissions.
Core
These permissions control access to workspace settings, user management, and platform-level configuration.
| Permission | What it allows |
|---|---|
| Full Admin Access | Full administrative access to tenant settings, users, and roles |
| View Permissions | View permissions and role configurations |
| Edit Permissions | Edit role and user permissions across the workspace |
| View Branding | View workspace branding settings (logo, colours, display name) |
| Edit Branding | Edit workspace branding including logo and brand colours |
| Manage Notifications | Configure notification preferences and delivery rules |
| Manage Document Templates | Create, edit, and delete document templates |
| API Access | Generate and manage personal API keys for external integrations |
| View Audit Log | View the audit trail of significant system actions |
| View Access Log | View the login and logout access log for all users |
Purchasing
Controls access to purchase orders, suppliers, approvals, payments, and accounting integrations.
| Permission | What it allows |
|---|---|
| Access Purchasing | Access the Purchasing module |
| View Purchase Orders | View purchase orders |
| Create Purchase Orders | Create new purchase orders |
| Edit Purchase Orders | Edit draft purchase orders |
| Submit Purchase Orders | Submit purchase orders for approval |
| Delete Purchase Orders | Delete draft purchase orders |
| Rename Purchase Orders | Rename purchase order references and titles |
| Correct Order Metadata | Correct metadata (reference, date, notes) on a submitted or approved order without triggering re-approval |
| Amend Order Lines | Amend line items on an approved or posted purchase order |
| View All Orders | View purchase orders created by all users, not just your own |
| Approve Purchase Orders | Approve purchase orders submitted for approval |
| Reject Anytime | Reject a purchase order at any lifecycle stage, including after posting |
| Post Purchase Orders | Mark an approved purchase order as posted (sent to supplier) |
| Touch All Orders | Edit and act on purchase orders created by other users as if they were your own |
| View Order History | View the full change and approval history for a purchase order |
| View Deleted Orders | View purchase orders that have been deleted |
| View Compliance | View compliance documents and audit trails attached to purchase orders |
| View Payments | View payment records attached to purchase orders |
| Manage Payments | Add, edit, and delete payment records on purchase orders |
| Reverse Payments | Reverse a payment record on a purchase order |
| Manage Suppliers | Create, edit, and manage supplier records |
| View Reports | Access Purchasing reports and analytics |
| Export to Accounting | Export purchase order data in accounting-ready formats |
| Manage Integrations | Configure accounting integrations (Xero, QuickBooks, etc.) |
| Access Quotes | Access the Quotes section within Purchasing |
| Create Recurring Orders | Create recurring purchase order templates |
| Override Recurring Approval | Bypass the approval step when creating orders from a recurring template |
| Purchasing Admin | Full administrative access to all Purchasing settings and configuration |
| External API Access | Access Purchasing data via the external API |
Inventory
Controls access to stock records, warehouses, containers, prep sheets, and subhire.
| Permission | What it allows |
|---|---|
| Access Inventory | Access the Inventory module |
| View Items | View inventory item records |
| Create Items | Create new inventory items |
| Edit Items | Edit existing inventory item details |
| Delete Items | Delete inventory items |
| View Cost | View cost and valuation information on inventory items |
| Edit Cost | Edit cost and valuation information on inventory items |
| Check Out Items | Check out inventory items to a project or user |
| Check In Items | Check in inventory items returning from use |
| View Movement Log | View the movement history log for inventory items |
| Manage Warehouses | Create, edit, and manage warehouse locations |
| Manage Categories | Create, edit, and manage item categories |
| Export Data | Export inventory data to CSV or other formats |
| Generate Reports | Generate inventory reports and analytics |
| View Repair Log | View the repair and maintenance log for inventory items |
| Add Repair Log Entries | Add entries to the repair and maintenance log |
| Manage Ships-With | Manage ships-with groupings that define what items travel together |
| View Prep Sheets | View prep sheets attached to projects or warehouses |
| Manage Prep Sheets | Create, edit, and manage prep sheets |
| Scan Prep Sheets | Use barcode scanning to action items on a prep sheet |
| View Container Contents | View the contents of containers and cases |
| View Container History | View the packing and movement history of a container |
| Manage Containers | Create, edit, and manage containers and cases |
| Pack Containers | Pack and unpack items into containers |
| View Linked Inventory | View inventory shared from linked companies |
| Manage Company Links | Manage links to other companies for shared inventory access |
| Use Shared Library | Use items from the shared inventory library |
| Create Subhire Requests | Create a subhire request to hire equipment from an external source |
| Manage Subhire | Manage and action subhire requests |
| Manage Subhire Sources | Add and manage subhire source companies |
| Manage Inventory Permissions | Manage Inventory-specific permission settings |
PAT Testing
PAT testing permissions are part of the Inventory module.
| Permission | What it allows |
|---|---|
| View PAT Dashboard | View the PAT testing dashboard and summary statistics |
| View PAT Tests | View PAT test records for inventory items |
| View PAT Profiles | View PAT testing profiles and retest schedules |
| Record PAT Test | Record a new PAT test result against an item |
| Edit PAT Test | Edit an existing PAT test record |
| Delete PAT Test | Delete a PAT test record |
| Edit PAT Item Fields | Update PAT-related fields on an inventory item |
| Manage PAT Profiles | Create and manage PAT testing profiles and retest schedules |
| Export PAT Data | Export PAT test data for compliance records |
| Import PAT Tests | Import PAT test data in bulk |
Planner
Controls access to workforce scheduling, shift management, time off, and workforce profiles.
| Permission | What it allows |
|---|---|
| Access Planner | Access the Planner module |
| View Own Shifts | View shifts assigned to the current user |
| View All Shifts | View all shifts across all users and projects |
| Schedule Shifts | Create and assign shifts to users on the planner |
| Edit Shifts | Edit existing shifts including dates, times, and assignments |
| Set Custom Shift Rate | Override the default pay rate when creating or editing a shift |
| Override Read-Only Shifts | Edit shifts that have been marked as read-only or locked |
| View Workforce Profiles | View workforce profile pages including contact details and history |
| Edit Workforce Details | Edit basic details on a workforce profile (name, contact info) |
| Edit Compensation | View and edit pay rates and compensation on a workforce profile |
| Edit Restrictions | Edit working restrictions on a workforce profile (e.g. under 18, no driving) |
| Edit Working Hours | Edit working hour limits and availability settings on a workforce profile |
| Edit Skills | Add and remove skills on a workforce profile |
| Edit Certifications | Add and remove certifications on a workforce profile |
| Manage Contracts | Generate, send, acknowledge, upload, and delete worker contracts on workforce profiles |
| Rate Workforce | Leave ratings and feedback for workforce members after shifts |
| Manage Time Off | Create and edit time-off requests on behalf of workforce members |
| Approve Time Off | Approve or reject time-off requests submitted by workforce members |
| Cancel Time Off | Cancel approved time-off and return the days to the pool |
| View After-Shift Reports | View after-shift reports submitted by crew members |
| Submit After-Shift Reports | Submit after-shift reports |
| View Policy Violations | View flagged policy violations on shifts (e.g. rest period breaches) |
| Manage Policies | Create and configure workforce scheduling policies |
| Edit Positions | Create and edit position types used when scheduling shifts |
| Manage Skills Library | Create and manage the skills library used on workforce profiles |
| Manage Certifications Library | Create and manage the certifications library |
| Manage Compensation Templates | Create and manage pay rate templates |
| Manage Time Units | Configure time units used for billing and payroll calculations |
| Manage Calendar Tokens | Manage calendar feed tokens for exporting schedules to external calendars |
| Invite Workforce | Invite new users to the workspace as workforce members |
| Manage Planner Permissions | Manage Planner-specific permission settings |
| Request Studio Bookings | Submit a studio or resource booking request |
| Approve Studio Bookings | Approve or reject studio and resource booking requests |
| Delete Studio Bookings | Delete studio and resource bookings |
CRM
Controls access to organisations, contacts, deals, notes, tasks, and the sales pipeline.
| Permission | What it allows |
|---|---|
| Access CRM | Access the CRM module |
| View Organisations | View organisation records |
| Edit Organisations | Create and edit organisation records |
| Delete Organisations | Delete organisation records |
| View Contacts | View contact records |
| Edit Contacts | Create and edit contact records |
| View Deals | View deal records and the sales pipeline |
| Edit Deals | Create and edit deal records |
| View Notes | View notes attached to CRM records |
| Edit Notes | Add, edit, and delete notes on CRM records |
| View Private Notes | View notes marked as private, not visible to all CRM users |
| View Tasks | View tasks associated with CRM records |
| Edit Tasks | Create, edit, and complete tasks on CRM records |
| View Interactions | View logged interactions (calls, emails, meetings) on CRM records |
| Log Interactions | Log new interactions on CRM records |
| View Quotes | View quotes attached to deals |
| Edit Quotes | Create and edit quotes on deals |
| View Reports | Access CRM reports and pipeline analytics |
| Export Data | Export CRM data to CSV or other formats |
| Manage Pipeline | Configure the deal pipeline stages |
| Manage Settings | Access and edit CRM module settings |
| Manage Ownership | Reassign CRM records to different owners |
| Manage GDPR | Manage GDPR actions on CRM records (anonymise, delete personal data) |
| CRM Admin | Full administrative access to all CRM settings |
HR
Controls access to employee records, compliance, contracts, training, and incidents.
| Permission | What it allows |
|---|---|
| Access HR | Access the HR module |
| View Employees | View employee records |
| Edit Employees | Create and edit employee records |
| Manage Employee Accounts | Manage the linked system accounts for employees |
| View Directory | View the employee directory |
| View Compliance | View compliance records (right to work, documentation) on employee profiles |
| Edit Compliance | Add and update compliance records on employee profiles |
| View Contracts | View employment contracts on employee profiles |
| Edit Contracts | Create and edit employment contracts |
| View Compensation | View salary and compensation information on employee profiles |
| Edit Compensation | Edit salary and compensation information on employee profiles |
| View Incidents | View HR incident records |
| View Confidential Incidents | View incident records marked as confidential |
| Log Incidents | Log new HR incidents |
| View Training Records | View training records and course completions on employee profiles |
| Edit Training Records | Edit training records on employee profiles |
| Manage Courses | Create and manage training courses in the course library |
| Assign Courses | Assign training courses to employees |
| Complete Courses | Mark a training course as complete on an employee's record |
| View Course Progress | View progress and completion status across employees for training courses |
| Manage Employee Assets | Manage assets assigned to employees (equipment, access passes, etc.) |
| View Shared Contacts | View the shared HR contact directory |
| Manage Settings | Access and edit HR module settings |
| Export Data | Export HR data to CSV or other formats |
Fleet
Controls access to vehicle records, driver management, inspections, and compliance documents.
| Permission | What it allows |
|---|---|
| Access Fleet | Access the Fleet module |
| Manage Vehicles | Add, edit, and manage vehicle records |
| Manage Drivers | Add, edit, and manage driver records and licence information |
| Manage Inspections | Record and manage vehicle inspection reports |
| Manage Inspection Steps | Configure the steps in the vehicle inspection workflow |
| Manage Documents | Attach and manage compliance documents on vehicle records |
| Manage Settings | Access and edit Fleet module settings |
Vault
Controls access to encrypted secrets. Vault permissions are intentionally fine-grained — viewing that a secret exists, revealing its value, and managing entries are all separate permissions.
| Permission | What it allows |
|---|---|
| View Vault Entries | View the existence of secret entries in the Vault (does not reveal values) |
| Reveal Vault Secrets | Reveal the secret value of a Vault entry (requires OTP challenge) |
| Manage Vault Entries | Create, edit, and delete Vault entries |
| Manage Vault Grants | Manage which users have access to which Vault entries |
| Vault Admin | Full administrative access to the Vault including all entries and grants |
Transfer
Controls access to file transfer packages.
| Permission | What it allows |
|---|---|
| View Packages | View file transfer packages |
| Edit Packages | Create and edit file transfer packages |
| Delete Packages | Delete file transfer packages |
| See All Packages | View all transfer packages across all users, not just your own |
Data Exchange
Controls which data types can be imported and exported.
| Permission | What it allows |
|---|---|
| Export Inventory | Export inventory data |
| Export Contacts | Export contact data |
| Export Projects | Export project and event data |
| Export Assignments | Export assignment data |
| Export Venues | Export venue data |
| Import Inventory | Import inventory data |
| Import Contacts | Import contact data |
| Import Projects | Import project and event data |
| Import Assignments | Import assignment data |
| Import Venues | Import venue data |