Skip to main content
The permissions template is a JSON file containing every permission assignment for all default roles and account types. Use it to bootstrap a new installation, restore defaults, or audit your current configuration.

Download Default Permissions Template

JSON file containing 402 API, 103 page, 45 document, and 2 notification permission keys across 5 roles and 2 account types. Import via Admin → Settings → Permissions → Import.

Template structure

The exported JSON follows this structure:
Each permission value is 1 (enabled) or 0 (disabled).

What’s included

Default roles

Default account types

Total counts include both enabled (1) and disabled (0) keys. The number of enabled permissions varies per role — SysOps has all enabled, while Minimal Access has most disabled.

How to import

1

Go to Permissions

Navigate to Admin → Settings → Permissions.
2

Select Import

Click the Import button in the toolbar.
3

Choose the file

Select the downloaded JSON template file. A confirmation dialog shows a summary of the file — who exported it, when, and how many permissions are included.
4

Confirm

Click Import to apply. The page reloads with the updated permission state.
Importing overwrites existing permission values using upsert logic. Roles or account types present in the file but missing from the database are skipped. Always export a backup first.

All permission keys

Every permission key included in the template, grouped by namespace. Use 1 to enable or 0 to disable each key.

api.admin.* — Administration

Controls access to system administration endpoints — branch management, settings, security reports, cleanup tools, and more.

api.agents.* — Agent Operations

Controls agent-level operations — branch assignments, SLA management, logo uploads, and contractor document thumbnails.

api.analytics.* — Analytics & Insights

Controls access to analytics dashboards and page/activity tracking.

api.calendar.* — Calendar


api.contractors.* — Contractors

Controls contractor management — listings, maintenance trades, and certifications.

api.dashboard.* — Dashboard Widgets

Controls visibility of individual dashboard widgets, chiplets, and charts.

api.email.* — Email


api.financial.* — Financial


api.jobs.* — Jobs Management

The largest API namespace. Controls all job CRUD, case notes, photos, documents, statuses, types, and more.

api.security.* — Security

Controls security features — file integrity, session management, CSRF, password breach scanning, and alerts.

api.services.* — Services


api.sla.* — SLA


api.system.* — System

Controls core system operations — heartbeat, logs, maintenance mode, notices, notifications, and push messaging.

api.tenants.* — Tenants


api.users.* — Users & Staff


api.whatsapp.* — WhatsApp


notifications.* — Notification Targeting

These keys are stored in the api_permissions table but control notification routing rather than API access.

page.analytics.* — Analytics


page.branches.* — Branches


page.calendar.* — Calendar


page.contractors.* — Contractors


page.dashboard.* — Dashboard


page.electron.* — Electron Desktop Sidepanels

These permissions are only relevant when PropOps Web is running as an Electron desktop application.

page.financial.* — Financial


page.job.* — Jobs (Single)

Controls access to job list, creation, editing, duplication, and read-only views.

page.jobs.* — Jobs (List)


page.map.* — Map


page.notifications.* — Notifications


page.reports.* — Reports



page.security.* — Security


page.settings.* — Settings & Administration

The largest page namespace. Controls access to every page within the Settings area.

page.system.* — System


page.tenants.* — Tenants


page.users.* — User Management

Controls access to user management, including per-account-type tab visibility and creation buttons.

document.* — Document Permissions

Document permissions are dynamic — generated from the job_file_types database table. Each document type gets .upload, .read, and .delete keys.