Roles and permissions

Who can see and change what, and how access is granted.

Last updated : 29 October 2026

Access in the app combines a role (granted to a person) with rights on a specific object (an owner, a named reviewer, a named approver). The server checks the right on every call; hiding a button is never the only protection.

RolesThe twelve roles of the app, how to grant them from Settings › Access, and how the server checks the rights.Role: Administrator
The rights matrixThe twelve roles of the app and their rights, domain by domain. The table is generated from the app's rules, never written by hand.

Was this page helpful?