Roles & permissions
Who can do what in the console, and what data each employee sees.
Roles and scope: the two ideas
Audience: Platform administrators who decide who can do what in the console. You need: the Assign...
Scope: what data an employee can see
Every employee has a single scope, which controls what data is visible to them everywhere in the ...
The role catalogue
Each role covers one area of responsibility. If someone needs two areas, give them two roles — se...
Access by section
The full grid of what each role reaches. Legend: 👁 read-only · ✏️ read and write · — no access. A...
Common role combinations
Because an employee can hold several roles and all of them share one scope, most real profiles ar...
How scope works in practice
Four behaviours explain almost every "why can this person see that?" question. Roles are additive...
Managing roles from the console
The console manages roles, assignments, scopes and individual exceptions through four sections. S...
Setting an employee's scope
You need: employees:read and employees:write — held by admin and employee_manager. Scope is s...
Individual permission exceptions
You need: employees:read and employees:write — held by admin and employee_manager. An excepti...
Requesting a new or changed role
Creating or editing a role definition is restricted to PizzaGest's technical team. As a customer ...