Understanding user roles and permissions

Every user has exactly one role, and the role decides what they can see and do across the whole portal.

The five roles#

• Account Owner — full control of everything, including the team, billing, and security policy. Every account always keeps at least one active owner; the portal will refuse to deactivate or demote the last one.
• Administrator — the day-to-day equal of an owner: manages records, team members, integrations, inspection questions, and security policy.
• Standard User — manages the compliance records themselves: locations, equipment, consumables, responders, and documents.
• Inspector — records inspections and reports incidents, and views the records those tasks need. Ideal for field staff.
• Read Only — sees everything they are scoped to, changes nothing. Ideal for auditors, executives, and oversight partners.

Two guards that apply on top of roles#

• Patient information — the optional patient section on incident reports is visible only to Account Owners and Administrators, no matter who wrote the report.
• Location access — any user can be limited to specific locations; every list, calendar, alert, and report then shows only those locations' records. See Per-user location access.

Note: Roles are assigned on the Team page and can be changed at any time — the change applies on the user's next page load.