Roles & Permissions

Roles

Role	Description
Admin	Platform-level administrator. Has full access to all features and all tenants.
Tenant Manager	Organisation-level user. Access is controlled by the specific permissions assigned to them.
Employee	Restricted access user — typically a floor-level worker. Can submit checklists and view their location. Has a simplified navigation layout.

Users with the Employee role see a different sidebar from Tenant Managers:

Locations appears at the top level of the navigation (alongside Violations, Checklists, etc.)
Locations does not appear under Settings for employees

Permission	What it grants
`DASHBOARD_VIEW`	Can view the dashboard
`VIOLATIONS_VIEW`	Can view the violations list and details
`SYSTEM_HEALTH_VIEW`	Can view the system health page
`CHECKLISTS_VIEW`	Can view checklist submission history
`CHECKLISTS_MANAGE`	Can create and edit checklist templates
`CHECKLISTS_SUBMIT`	Can fill in and submit checklists
`ENTER_LEAVE_EVENTS_VIEW`	Can view enter/leave event history
`LOCATIONS_VIEW`	Can view locations
`LOCATIONS_MANAGE`	Can create, edit, and delete locations
`CAMERAS_VIEW`	Can view the camera list
`CAMERAS_MANAGE`	Can add, edit, and delete cameras. Also enables click-to-edit on camera cards.
`USERS_VIEW`	Can view the team member list
`USERS_MANAGE`	Can invite users, change roles, and revoke access
`EMPLOYEES_VIEW`	Can view the employee list
`EMPLOYEES_MANAGE`	Can create, edit, and delete employee records
`SCHEDULES_VIEW`	Can view schedules
`SCHEDULES_MANAGE`	Can create and edit schedules
`MODELS_VIEW`	Can view AI models
`MODELS_MANAGE`	Can manage and assign AI models
`DEVICES_VIEW`	Can view devices (Bridges, Tablets)
`DEVICES_MANAGE`	Can manage devices and assign them to locations
`SETTINGS_MANAGE`	Can access the Settings area
`AIR_DEVICES_VIEW`	Can see the Air Sensors section within Devices
`AIR_DEVICES_REQUEST`	Can create new Air Sensor requests and cancel existing ones
`USECASES_VIEW`	Can view the Detection Use Cases list and configuration
`USECASES_MANAGE`	Can activate/deactivate use cases and save configuration changes

Permissions are assigned per user per organisation by an Admin or a Tenant Manager with the USERS_MANAGE permission.