Roles grant permissions resource by resource and action by action, denied by default, with six starter roles for facility management running from local manager to compliance officer. Scopes then decide where those permissions apply: a tree over the estate with country nodes, regional nodes and building leaves, where a grant on any node covers everything beneath it.
Multi-site operators need a local manager to see their own site and a country manager to see their country, without somebody maintaining that by hand every time a building is added. Because scoping follows the estate tree, adding a building to a region grants the right people access to it as a side effect. Denying by default matters when tenant and contractor data sits in the same system as your own records.
Roles, each with its own set of permissions.
How it works
Roles and permissions
Roles per organisation, granting permissions resource by resource and action by action, denied by default, with six facility-management starter roles.
Scope tree
Country nodes, regional nodes and building leaves. A grant on a node covers its whole subtree.
Team and roles
Access follows the building tree: a local manager sees their site, a country manager their country.
Organisation
The root of everything. Every record belongs to exactly one organisation.
In practice
A new country manager for France starts on Monday.
She is given the Country Manager role, scoped to the France node of the estate tree.
That single grant covers every building beneath it. Lyon Sud today, and any French site added later, without anybody revisiting her access.
She sees French work orders, French compliance and French spend. Berlin Nord is not hidden from her by a filter; it is not hers to see.
A contractor working at Lyon Sud is scoped to that one building. He sees the jobs assigned to him. He does not see the compliance matrix or anybody’s costs.
A Belgian site is added under a new Benelux node. Nothing she holds changes, and nobody has to check whether it should have.
A newly created role starts with nothing at all, because permission is denied by default and granted deliberately.
Access follows the shape of the estate rather than a list somebody maintains by hand. That is what stops a growing estate quietly becoming a system where everyone can see everything because it was easier.
Illustrative walkthrough. Not a customer record.
What we will show you in a demo
A building added to a region, with the right people already given access to it.
A local manager's login, and the rest of the estate they cannot see.
Deny by default: a newly created role starts with nothing at all.
Insurance, contracts and spending limits as live records with dates on them, not folders somebody forgot to open. Contractors and suppliers sit in one central register with their service agreements,…
Every euro attributed, and a changed number that leaves a trace. Costs attach to the work order as lines: invoices, labour and materials, approved, posted, and rolled up by building…
Proof attached to the thing it proves, not merely filed somewhere near it. Photos attach at the exact place they belong: the finding, the job, the asset. They are captioned,…
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
English (UK)
