Role-Based Access Control (RBAC) 

RBAC assigns permissions to users based on their role in the organisation. Each role comes with specific permissions, meaning users can only access relevant features, data, and actions within the system. For example, only authorised users can modify asset records, allocate work orders, approve quotes, or access financial information. 

Ascending – -> ReadOnly (lowest internal staff level) to Manager (full system control).

• ReadOnly:  Access to Search, View and Export lists, details. Execute Reports.
• Asset & Scheduler: Restricted permissions Subscriber role with access to Asset and Scheduler.
• Create & Update:  General base level permissions, cannot see pricing but can create and update Service Requests, Scopes, Quotes, Orders etc.
• Review & Approve:  Increased permissions level up from Create & Update Role. Can see pricing to review and approve Scopes, Quotes, Service Requests, Work Orders
• Finance:  Permissions for invoicing along with Service Requests and other daily access permissions.
• Manager:  Access to full system
• SpyderFlow Administrator: Full access including Account Administration.

Examples:

• Reception staff who take Service Requests may require Create & Update User Role. Cannot access pricing in this permission level.
• Review & Approve User Role to access pricing details. Could be staff who approve requests, scopes, quotes, orders.
• Invoice approval Staff may require “Finance’ User Role.
• Manager Role required for approvals and flow to invoices.
• SpyderFlow Administrator Role required for User account administration, configuration of settings in SpyderFlow.