Permissions

Each WAYDOT capability is a permission. Roles are sets of permissions, and a person has the sum of their roles' permissions plus any granted to them directly. See Roles and access.

Interface colorWAYDOTSupabaseClaudeEnlarge

The Permissions tab with every capability.

The columns are the system roles: Field Agent, Operations manager, Compliance manager, HR administrator and Super administrator. A permission saying in your scope or across your territories is limited to the person's scope; without that it's either organization-wide or only your own, as it says.

Some permissions only apply if your plan includes the matching module.

Operations

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
tickets:read	Read tickets assigned to you	✓	✓	✓		✓
tickets:read.scope	Read every ticket in your assigned operational scope		✓	✓		✓
tickets:create	Open new tickets	✓	✓			✓
tickets:assign	Assign, offer and staff tickets		✓			✓
tickets:update	Advance and record work on tickets you can see	✓	✓			✓
tickets:cancel	Cancel open tickets		✓			✓
operations:read	Read the live operations board		✓			✓
tasks:read	Read task list blueprints and attached forms	✓	✓	✓		✓
tasks:manage	Write task list blueprints and attach them to tickets		✓			✓
escalations:read	Read escalation chains and ticket escalation history		✓	✓		✓
escalations:manage	Write escalation chains		✓			✓
scheduled_visits:read	Read scheduled visits and the visit dashboard		✓	✓		✓
scheduled_visits:manage	Write, pause and cancel scheduled visits		✓			✓
knowledge:read	Read the knowledge base	✓	✓	✓		✓
knowledge:propose	Propose knowledge articles from resolved work	✓	✓			✓
knowledge:manage	Publish, review and retire knowledge articles		✓			✓
offers:respond	Accept or decline ticket offers	✓				✓
availability:update	Change your own availability	✓				✓
intake:triage	Work the intake inbox: turn inbound messages into tickets		✓			✓

Location

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
location:report	Report your own position	✓				✓
geo:read	Read your own location trail	✓	✓	✓		✓
geo:read.scope	Read location trails across your territories		✓	✓		✓
geo:manage	Draw geofences		✓			✓
geo:review	Review flagged location anomalies			✓		✓

Security and access

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
audit:read	Read activity you caused			✓	✓	✓
audit:read.scope	Read activity across your territories			✓	✓	✓
audit:export	Export the activity log			✓	✓	✓
sessions:manage	Manage your own active sessions	✓	✓	✓	✓	✓
roles:read	Read roles and the permission catalog		✓	✓	✓	✓
roles:assign	Assign roles and direct permissions to users				✓	✓
roles:manage	Create, edit and delete custom roles				✓	✓
permissions:grant	Grant time-bounded direct permissions				✓	✓

People

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
users:read	Read the people directory in your scope		✓	✓	✓	✓
users:read.all	Read the whole people directory				✓	✓
users:create	Create user accounts				✓	✓
users:update	Edit user accounts				✓	✓
users:deactivate	Deactivate and reactivate accounts				✓	✓
hrms:read_pii	Read employee files: statutory identifiers, documents, health and bank data				✓	✓
hrms:manage	Maintain employee files and verify or reject their documents				✓	✓
engagement:manage	Publish news, policies and pulse surveys, and read who read, signed and answered				✓	✓

Master data

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
clients:read	Read clients and their contracts		✓	✓		✓
clients:manage	Write clients, contracts and SLA matrices					✓
clients:reports	Read and export the client-facing service reports		✓	✓		✓
sites:read	Read sites and the geographic hierarchy		✓	✓		✓
sites:manage	Write sites and geographic nodes		✓			✓

Assets and fleet

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
assets:read	Read assets in your custody and the stock in your territories	✓	✓	✓		✓
assets:read.scope	Read every asset in your territories		✓	✓		✓
assets:transfer	Request, receive and cancel asset transfers	✓	✓			✓
assets:transfer_approve	Approve or reject asset transfers		✓			✓
assets:manage	Administer assets, warehouses and the product catalog					✓
fleet:read	Read the vehicle assigned to you and your own fuel and maintenance records	✓	✓	✓	✓	✓
fleet:read.scope	Read every vehicle and its records across your territories		✓	✓	✓	✓
fleet:log	Log fuel purchases, odometer readings and maintenance issues on your assigned vehicle	✓	✓			✓
fleet:approve	Approve or reject fuel purchases		✓			✓
fleet:manage	Administer vehicles, their documents, assignments and maintenance plans		✓			✓

Workforce

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
attendance:clock	Clock in and out	✓				✓
attendance:read	Read your own attendance	✓	✓	✓	✓	✓
attendance:read.scope	Read attendance across your territories		✓	✓	✓	✓
attendance:manage	Approve attendance and rule on corrections				✓	✓
shifts:read	Read shifts and the roster	✓	✓	✓	✓	✓
shifts:manage	Plan shifts and the roster		✓			✓
leave:read	Read your own leave	✓	✓		✓	✓
leave:read.scope	Read leave across your territories		✓		✓	✓
leave:manage	Rule on leave requests				✓	✓
leave:schedule	Book leave on behalf of people in your scope		✓		✓	✓

Health and safety

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
hse:read	Read the safety record you are part of	✓	✓	✓	✓	✓
hse:read.scope	Read the safety record across your territories		✓	✓	✓	✓
hse:report	File JSAs, hazards, incidents and SOS alerts	✓				✓
hse:respond	Answer SOS alerts		✓	✓		✓
hse:manage	Write safety checklists and close investigations			✓		✓

Quality

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
qa:read	Read the quality record you are part of	✓	✓	✓		✓
qa:read.scope	Read the quality record across your territories		✓	✓		✓
qa:audit	Carry out and grade quality audits		✓	✓		✓
qa:manage	Write quality rules and verify defects			✓		✓

Platform

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
sync:pull	Pull offline sync changes	✓				✓
sync:push	Push offline sync mutations	✓				✓
notifications:read	Read notification deliveries		✓	✓		✓
notifications:manage	Write notification rules		✓			✓
settings:read	Read platform business settings					✓
settings:manage	Change platform business settings					✓
billing:manage	Read invoices, change the plan and payment method, and manage the billing profile					✓
organization:manage	Export the workspace and close it					✓
integrations:read	See integrations, service accounts and webhook deliveries		✓			✓
integrations:manage	Connect integrations, issue service tokens and register webhooks					✓

Intelligence

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
intelligence:read	Read predictive intelligence and model registry metrics		✓	✓		✓
intelligence:manage	Tune adaptive dispatch weights		✓			✓

Finance

Permission	What it allows	Agent	Operations	Compliance	HR	Super admin
expenses:submit	Submit your own expense claims	✓				✓
expenses:read	Read your own expense claims and mileage	✓	✓		✓	✓
expenses:read.scope	Read expense claims and mileage across your territories		✓		✓	✓
expenses:approve	Review and approve expense claims, never your own		✓			✓
finance:read	Read cost analytics and client profitability		✓			✓
finance:manage	Write expense policies, mileage rates, compensation and tax tables					✓
payroll:read	Read payroll periods and payslips in your scope				✓	✓
payroll:manage	Open, collect, calculate and export payroll periods					✓
payroll:approve	Approve a calculated payroll period, never one you calculated				✓	✓