Role permissions
What each role can do, module by module, and which actions are restricted to administrators.
This is the reference behind Roles and permissions. Use it to work out which role someone needs, or why an action is unavailable.
Reading rights are broad, actions are narrow
Almost every staff role can see across the operation. Only the role that owns the consequence can act. Flight crew are the exception - they see only their own surfaces.
Who can do what
| Action | Roles that can do it |
|---|---|
| Fleet | |
| Register aircraft, change configuration | CAMO engineer |
| Fit and remove components | CAMO engineer, mechanic, inspector, certifier |
| Post utilisation | CAMO engineer, planner, mechanic |
| Correct a utilisation posting | CAMO engineer |
| Compliance | |
| Manage the maintenance programme, ADs, MEL | CAMO engineer |
| Planning | |
| Plan and schedule work, edit the board | Planner, CAMO engineer |
| Import flight schedules | Planner |
| Produce a workforce forecast | Planner, CAMO engineer |
| Execution | |
| Perform and sign off work | Mechanic, inspector, certifier |
| Assign work | Planner, CAMO engineer, certifier |
| Raise a defect | Mechanic, inspector, certifier, CAMO engineer, planner, flight crew |
| Defer a defect under the MEL | CAMO engineer, certifier |
| Release to service | Certifier |
| Record a pre-departure check | Mechanic, certifier |
| Clock on and off | Mechanic, inspector, certifier |
| Approve a timekeeping correction | Planner, CAMO engineer, certifier |
| Compose and issue a shift handover | Planner, CAMO engineer, certifier |
| Materials | |
| Receive, issue and move stock | Storekeeper |
| Reserve stock against a task | Planner, mechanic, storekeeper, CAMO engineer |
| Count stock | Storekeeper |
| Approve a count correction | Administrator only |
| Adjust stock | Administrator only |
| Build and pick kits | Storekeeper, planner |
| Ship and receive shipments | Storekeeper |
| Request cannibalisation | Storekeeper, planner |
| Approve cannibalisation | CAMO engineer |
| Quarantine material | Storekeeper, inspector, quality |
| Material review board decisions | Quality |
| Procurement | |
| Raise a requisition | Planner, storekeeper, purchaser, CAMO engineer |
| Place a purchase order | Purchaser |
| Run an RFQ | Purchaser |
| Exchange and loan orders | Purchaser |
| Pooling orders | Commercial |
| Manage trading parties | Purchaser, commercial |
| Approve a vendor | Quality |
| Override a vendor block | Administrator only |
| Manage and issue tooling | Storekeeper (issue also mechanic, inspector, certifier) |
| Warranty claims | Purchaser, storekeeper |
| Shop | |
| Manage a shop order | Planner, mechanic, inspector, certifier |
| Record findings | Mechanic, inspector, certifier |
| Approve a workscope | CAMO engineer, certifier |
| Issue an authorised-release certificate | Certifier |
| Scrap a component | Certifier, quality |
| Manage the capability list | Quality |
| Records | |
| Register a document | Most staff roles |
| Export a records package | Records, CAMO engineer, quality, commercial |
| Engineering | |
| Technical publications, campaigns, weight and balance, damage | CAMO engineer |
| Request an interval extension | CAMO engineer |
| Approve an interval extension | Quality |
| Acknowledge a read-and-sign item | Anyone named on the distribution list |
| Quality | |
| Manage audits and quality records | Quality |
| Raise a safety occurrence | Every role, including flight crew |
| Respond to a quality finding | Every staff role |
| Reliability | |
| Manage reliability reporting | Reliability, CAMO engineer |
| Ingest and manage aircraft health data | CAMO engineer |
| Personnel | |
| Manage people and qualifications | Quality |
| Training | |
| See the catalogue, your own matrix row and file | Every staff role |
| See anyone's training file and the full matrix | Quality, planner, CAMO engineer, records |
| Manage courses, sessions and enrolment | Quality |
| Record results and external training | Quality |
| Billing | |
| See the billing module at all | Administrator, commercial, CAMO engineer, planner |
| Quotes, orders and invoicing | Commercial |
| Accounts payable, receivables, landed cost, valuation, budgets | Commercial |
| Override an AP block | Administrator only |
| Leases | |
| See lease existence and terms | Every staff role |
| Lease commercial detail | Commercial, records |
| Techlog | |
| Record sectors and certify techlog entries | Flight crew |
| Read the techlog | Every role |
| Settings | |
| Organisation settings, cost centres, fiscal configuration | Administrator only |
Actions restricted to administrators
A small number of actions are deliberately administrator-only. Each one can change a recorded fact without a physical event behind it, or bypass a control:
- Stock adjustments, and approving a count correction.
- Overriding a vendor block.
- Overriding an accounts payable block.
- Organisation settings, including whether two-factor authentication is required.
Why these are not delegated
A gate that the approving team can open for itself is not a gate. Keeping these with administrators is what makes the rest of the controls meaningful.
Flight crew
Flight crew are excluded from the general staff read access. They hold only:
- The Techlog: recording sectors and certifying entries.
- Raising a defect from the flight deck.
- Raising a safety occurrence.
- Offline sync for their tablet.
Customers
Customer portal users hold no roles. Their access comes from the invitation that bound them to one customer account, and it is limited to that account's own work orders, documents and invoices. See the customer portal section.