Permissions by role

This article provides an overview of the permissions in BriqSafe by user role. It explains what actions each role can perform and what areas of the application they can access, helping you understand who on your team can do what within BriqSafe.

Note

Required role: varies by action; please see each section for role-specific permissions.

Roles and Access Overview

BriqSafe defines several user roles—Owner, Admin, Manager, Engineer, Inspector, and Viewer—with different levels of access and capabilities. Access permissions are enforced across modules such as Case Management, Client Management, Organisation Settings, and Scheduling.

Case Management Permissions

Cases are a paid feature and permissions depend on your role:

Role	Capabilities
Viewer	Read-only access to case lists and details (cannot create, edit, or act on cases). Cases tab is behind a paid entitlement.
Engineer	Create cases, edit details, add follow-up activities, attach photos/documents, link assets and systems, delete cases, start work on cases, add comments, and apply bulk changes (except closing or assigning).
Manager	All Engineer capabilities plus assigning/reassigning cases, closing, reopening, linking related cases, managing user access to locations, inviting users, and reassigning visits.
Admin	All Manager capabilities plus configuring case-creation rules (planned), creating and editing clients, managing organisation-wide settings, managing report presets, and managing global visit templates.
Owner	Full administrative rights including managing Owner roles, organisation archival, and highest-level user management.

Key Case Actions by Role

• Creating and editing cases: Engineers can create and edit cases while they are open but cannot close or assign cases.
• Assigning cases: Only Owners, Admins, and Managers can assign or reassign cases to team members.
• Adding follow-up work: Engineers can add follow-up activities to cases, which control scheduling tasks; scheduling visits and assigning jobs require additional rights.
• Closing and reopening cases: Only Owners, Admins, and Managers can close or reopen cases; Engineers do not have this permission.
• Deleting cases: Engineers with delete rights can delete non-closed cases; deletion is permanent and hidden for closed cases.
• Bulk actions: Engineers can bulk-start, comment, and schedule follow-up but cannot bulk-close or bulk-assign cases.

Client Management Permissions

Client-related functions are generally restricted to Owner and Admin roles, with read-only access for other roles where applicable.

• Creating and editing clients: Only Owner and Admin can create new clients or edit existing client details such as name, code, address, tax ID, and status.
• Assign locations to clients: Owners and Admins can link locations to clients to scope reporting and billing.
• Managing client contacts and certificates: Adding, editing, and deleting client contacts and their certificates require Owner or Admin permissions; read-only roles can view contacts but cannot modify.
• Browsing client lists: All roles can view the clients list, but only Owner and Admin can edit or add clients and contacts.

Organisation Settings and User Management

Administration of organisation-wide settings and user management is divided by role level:

• Owners: Manage organisational ownership, archive/unarchive organisations, and hold ultimate control over Owner assignments.
• Admins: Manage users (except assigning Owner roles), organisation branding, report presets, global visit templates, and organisational contacts directory.
• Managers: Manage team members within their scope, invite users, change roles (except Owner/Admin), and control location access for users they manage.
• Engineers and Inspectors: Can view users lists (except viewers cannot), but have no management rights.
• Viewers: Have no access to team member management; their requests return a permission denied state.

Scheduling & Control Scheme Access

• Viewers: Can view scheduled visits, control schemes, rotation plans, and calendar overviews but cannot schedule or edit visits.
• Engineers: Can reassign visits to different engineers and sign off visits after completing jobs.
• Managers: Can schedule, reschedule, skip, cancel, flag visits for review, and reassign visits to different workers.
• Admins and Owners: Full scheduling permissions including creating visit templates and managing scheduling features.

Profile and Personal Settings

All roles have access to their personal profile and account settings.

• Edit personal details such as name, phone number, biography, and interface language.
• Update profile picture with valid image types and size limits.
• Manage passwords and multi-factor authentication through an embedded hosted sign-in security widget.
• View, add, edit, or delete personal professional certificates.
• Use biometric app-lock on supported mobile devices for faster access.

Summary

Permissions in BriqSafe are carefully layered by role. Viewers have read-only access to most areas, Engineers can work actively with cases and visits but cannot perform administrative or closing actions, Managers extend those rights with case closure and user management capabilities, Admins have broad administrative powers, and Owners hold the highest privileges. Access to features like Cases depends on a paid entitlement on top of these roles.

Always confirm your organisation holds the necessary entitlements and that your role matches the permissions required for the tasks you need to perform.