Admin
Roles & Permissions
Click any cell to change access. Everything is logged, and permission changes take effect the moment you make them.
SSO + 2FA enforced
Active users
42
+5%Across 5 roles
Roles defined
5
+1%Fully customisable
2FA adoption
100%
+12%Enforced at sign-in
Audit events (30d)
8,412
+3.2%Retained for 7 years
Permission matrix
Click a cell to cycle None → Read → Full
| Module | Director | Ops Manager | Engineer | Finance | Subcontractor |
|---|---|---|---|---|---|
| Executive dashboard | |||||
| Sales pipeline | |||||
| Customer records | |||||
| Dispatch board | |||||
| Stock & purchasing | |||||
| Fleet tracking | |||||
| Invoicing | |||||
| Payroll & HR | |||||
| System settings |
Audit trail
Every change, every export, every login
- 09:41
Granted Finance write access to Stock & purchasing
Dan Reeves
- 09:12
Subcontractor role auto-expired for Ashgrove Ltd (contract ended)
System
- 08:54
Exported customer list (412 records) — logged and watermarked
Priya Shah
- Yesterday
Approval limit for Ops Manager raised to £5,000
Dan Reeves
- Yesterday
Failed login from unrecognised device blocked — Marcus Hale
System
Approval limits
Spend authority per role
DirectorUnlimited
Ops Manager£5,000
Finance£25,000
Engineer£250
Subcontractor£0
Security insight
Three users hold Full access to Payroll & HR but haven't opened it in 90 days. Down-scoping them to Read reduces your exposure with no impact on their work.