> ## Documentation Index > Fetch the complete documentation index at: https://help.propops.app/llms.txt > Use this file to discover all available pages before exploring further. # Permissions Template > Download the default PropOps permissions template and explore every permission key across page, API, document, and notification categories. The permissions template is a JSON file containing every permission assignment for all default roles and account types. Use it to bootstrap a new installation, restore defaults, or audit your current configuration. JSON file containing 402 API, 103 page, 45 document, and 2 notification permission keys across 5 roles and 2 account types. Import via **Admin → Settings → Permissions → Import**. *** ## Template structure The exported JSON follows this structure: ```json theme={null} { "version": 1, "exported_at": "2026-04-05T00:00:00+00:00", "exported_by": "PropOps", "roles": [ { "id": 1, "name": "SysOps", "permissions": { "api.admin.activity_log": 1, "api.admin.activity_log.view": 1 } } ], "account_types": [ { "id": 2, "name": "Agent", "permissions": { "api.jobs.manage.list": 1, "page.dashboard.view": 1 } } ] } ``` Each permission value is `1` (enabled) or `0` (disabled). *** ## What's included | Category | Keys | Prefix | Detailed Reference | | ------------------------ | ---- | ----------------- | ----------------------------------------------------------------- | | API Permissions | 402 | `api.*` | [API Permissions](/permissions/api-permissions) | | Page Permissions | 103 | `page.*` | [Page Permissions](/permissions/page-permissions) | | Document Permissions | 45 | `document.*` | [Document Permissions](/permissions/document-permissions) | | Notification Permissions | 2 | `notifications.*` | [Notification Permissions](/permissions/notification-permissions) | ### Default roles | Role | Level | API | Page | Document | Total | | --------------------------- | ----- | --- | ---- | -------- | ----- | | **SysOps** | 10 | 402 | 103 | 45 | 552 | | **Director** | 20 | 402 | 103 | 45 | 549 | | **Finance** | 30 | 402 | 103 | 45 | 540 | | **Maintenance Coordinator** | 40 | 402 | 103 | 45 | 537 | | **Minimal Access** | 50 | 402 | 103 | 45 | 453 | ### Default account types | Account Type | API | Page | Document | Total | | -------------- | --- | ---- | -------- | ----- | | **Agent** | 402 | 103 | 45 | 459 | | **Contractor** | 402 | 103 | 45 | 438 | Total counts include both enabled (`1`) and disabled (`0`) keys. The number of **enabled** permissions varies per role — SysOps has all enabled, while Minimal Access has most disabled. *** ## How to import Navigate to **Admin → Settings → Permissions**. Click the **Import** button in the toolbar. Select the downloaded JSON template file. A confirmation dialog shows a summary of the file — who exported it, when, and how many permissions are included. Click **Import** to apply. The page reloads with the updated permission state. Importing overwrites existing permission values using upsert logic. Roles or account types present in the file but missing from the database are skipped. Always export a backup first. *** ## All permission keys Every permission key included in the template, grouped by namespace. Use `1` to enable or `0` to disable each key. *** ### `api.admin.*` — Administration Controls access to system administration endpoints — branch management, settings, security reports, cleanup tools, and more. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ------------------------------------------------------ | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `api.admin.activity_log` | On | On | Off | Off | Off | Off | Off | | `api.admin.activity_log.view` | On | On | Off | Off | Off | Off | Off | | `api.admin.api_discovery` | On | On | Off | Off | Off | Off | Off | | `api.admin.api_discovery.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.api_permissions` | On | On | Off | Off | Off | Off | Off | | `api.admin.api_permissions.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.api_usage_stats` | On | On | Off | Off | Off | Off | Off | | `api.admin.api_usage_stats.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.branches` | On | On | On | On | Off | Off | Off | | `api.admin.branches.bulk_assign_logo` | On | On | On | On | Off | Off | Off | | `api.admin.branches.bulk_delete` | On | On | On | On | Off | Off | Off | | `api.admin.branches.bulk_disable` | On | On | On | On | Off | Off | Off | | `api.admin.branches.bulk_import` | On | On | On | On | Off | Off | Off | | `api.admin.branches.download_template` | On | On | On | On | Off | Off | Off | | `api.admin.branches.view` | On | On | On | On | Off | Off | Off | | `api.admin.cleanup_test_data` | On | On | Off | Off | Off | Off | Off | | `api.admin.cleanup_test_data.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.disable_branch` | On | On | Off | Off | Off | Off | Off | | `api.admin.disable_branch.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.document-types` | On | On | Off | Off | Off | Off | Off | | `api.admin.document-types.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.documents` | On | On | On | On | Off | Off | Off | | `api.admin.documents.manage` | On | On | On | On | Off | Off | Off | | `api.admin.email_logs` | On | On | On | On | Off | Off | Off | | `api.admin.email_logs.manage` | On | On | On | On | Off | Off | Off | | `api.admin.enable_branch` | On | On | Off | Off | Off | Off | Off | | `api.admin.enable_branch.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.generate_test_jobs` | On | On | Off | Off | Off | Off | Off | | `api.admin.generate_test_jobs.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.job-documents.regenerate-thumbnails` | On | On | Off | Off | Off | Off | Off | | `api.admin.job_documents` | On | On | On | On | Off | On | On | | `api.admin.job_documents.list` | On | On | On | On | Off | On | On | | `api.admin.job_documents.stats` | On | On | On | On | Off | On | On | | `api.admin.job_documents.view` | On | On | On | On | Off | On | On | | `api.admin.job_tags` | On | On | On | On | Off | On | On | | `api.admin.job_tags.priorities` | On | On | On | On | Off | On | On | | `api.admin.job_tags.priority` | On | On | On | On | Off | On | On | | `api.admin.job_tags.status` | On | On | On | On | Off | Off | Off | | `api.admin.job_tags.statuses` | On | On | On | On | Off | On | On | | `api.admin.job_tags.title` | On | On | On | On | Off | On | On | | `api.admin.job_tags.titles` | On | On | On | On | Off | On | On | | `api.admin.job_tags.type` | On | On | On | On | Off | On | On | | `api.admin.job_tags.types` | On | On | On | On | Off | On | On | | `api.admin.job_tags.view` | On | On | On | On | Off | On | On | | `api.admin.orphaned_file` | On | On | Off | Off | Off | Off | Off | | `api.admin.orphaned_file.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.orphaned_files` | On | On | Off | Off | Off | Off | Off | | `api.admin.orphaned_files.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.password_breach_status` | On | On | Off | Off | Off | Off | Off | | `api.admin.password_breach_status.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.permissions` | On | On | On | On | Off | Off | Off | | `api.admin.permissions.api_locations` | On | On | Off | Off | Off | Off | Off | | `api.admin.permissions.api_locations.view` | On | On | Off | Off | Off | Off | Off | | `api.admin.permissions.category` | On | On | Off | Off | Off | Off | Off | | `api.admin.permissions.category.view` | On | On | Off | Off | Off | Off | Off | | `api.admin.permissions.search` | On | On | Off | Off | Off | Off | Off | | `api.admin.permissions.update` | On | On | Off | Off | Off | Off | Off | | `api.admin.permissions.view` | On | On | On | On | Off | Off | Off | | `api.admin.permissions_dropdown` | On | On | Off | Off | Off | Off | Off | | `api.admin.permissions_dropdown.view` | On | On | Off | Off | Off | Off | Off | | `api.admin.rate_limiting` | On | On | Off | Off | Off | Off | Off | | `api.admin.resend_email` | On | On | On | On | Off | Off | Off | | `api.admin.resend_email.manage` | On | On | On | On | Off | Off | Off | | `api.admin.roles` | On | On | Off | Off | Off | Off | Off | | `api.admin.roles.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.scan_user_password` | On | On | Off | Off | Off | Off | Off | | `api.admin.scan_user_password.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.security_report` | On | On | Off | Off | Off | Off | Off | | `api.admin.security_report.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.api_action_types` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.api_action_types.create` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.api_action_types.list` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.api_action_types.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.api_action_types.stats` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.api_action_types.toggle_active` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.api_action_types.update` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.configuration.delete_group` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.configuration.delete_group.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.configuration.save_group` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.configuration.save_group.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.configuration.save_page` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings.configuration.save_page.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.settings_stats` | On | On | On | On | Off | Off | Off | | `api.admin.settings_stats.manage` | On | On | On | On | Off | Off | Off | | `api.admin.sync_background_registry` | On | Off | Off | Off | Off | Off | Off | | `api.admin.sync_background_registry.manage` | On | Off | Off | Off | Off | Off | Off | | `api.admin.test_data_stats` | On | On | Off | Off | Off | Off | Off | | `api.admin.test_data_stats.manage` | On | On | Off | Off | Off | Off | Off | | `api.admin.user_management_policy` | On | On | Off | Off | Off | Off | Off | | `api.admin.user_management_policy.manage` | On | On | Off | Off | Off | Off | Off | *** ### `api.agents.*` — Agent Operations Controls agent-level operations — branch assignments, SLA management, logo uploads, and contractor document thumbnails. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ---------------------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `api.agents.branch_jobs` | On | On | On | On | Off | Off | Off | | `api.agents.branch_jobs.manage` | On | On | On | On | Off | Off | Off | | `api.agents.branch_logo` | On | On | On | On | Off | Off | Off | | `api.agents.branch_logo.manage` | On | On | On | On | Off | Off | Off | | `api.agents.branch_profile_popover` | On | On | On | On | Off | Off | Off | | `api.agents.branch_profile_popover.manage` | On | On | On | On | Off | Off | Off | | `api.agents.branch_sharing` | On | Off | Off | Off | Off | On | Off | | `api.agents.branch_sla` | On | On | On | On | Off | Off | Off | | `api.agents.branch_sla.download` | On | On | On | On | Off | Off | Off | | `api.agents.branch_sla.manage` | On | On | On | On | Off | Off | Off | | `api.agents.branch_sla.upload` | On | On | On | On | Off | Off | Off | | `api.agents.branch_sla_response_times` | On | On | On | On | Off | Off | Off | | `api.agents.branch_sla_response_times.manage` | On | On | On | On | Off | Off | Off | | `api.agents.branches` | On | On | On | On | Off | Off | Off | | `api.agents.branches.assign_agent` | On | On | On | On | Off | Off | Off | | `api.agents.branches.bulk_update_coordinates` | On | On | On | On | Off | Off | Off | | `api.agents.branches.create_branch` | On | On | On | On | Off | Off | Off | | `api.agents.branches.delete_branch` | On | On | On | On | Off | Off | Off | | `api.agents.branches.disable_webhook_token` | On | On | On | On | Off | Off | Off | | `api.agents.branches.get_account_types` | On | On | On | On | Off | Off | Off | | `api.agents.branches.get_agent_branches` | On | On | On | On | Off | Off | Off | | `api.agents.branches.get_branch` | On | On | On | On | Off | Off | Off | | `api.agents.branches.get_branch_agents` | On | On | On | On | Off | Off | Off | | `api.agents.branches.get_branches` | On | On | On | On | Off | Off | Off | | `api.agents.branches.manage` | On | On | On | On | Off | Off | Off | | `api.agents.branches.regenerate_webhook_token` | On | On | On | On | Off | Off | Off | | `api.agents.branches.unassign_agent` | On | On | On | On | Off | Off | Off | | `api.agents.branches.update_branch` | On | On | On | On | Off | Off | Off | | `api.agents.document_thumbnail` | On | On | On | On | Off | Off | Off | | `api.agents.document_thumbnail.manage` | On | On | On | On | Off | Off | Off | | `api.agents.list` | On | On | On | On | Off | On | On | | `api.agents.list.list` | On | On | On | On | Off | On | On | | `api.agents.list.manage` | On | On | On | On | Off | Off | Off | *** ### `api.analytics.*` — Analytics & Insights Controls access to analytics dashboards and page/activity tracking. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ------------------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `api.analytics.branch_performance` | On | On | On | On | Off | Off | Off | | `api.analytics.filtered_activity` | On | On | On | On | Off | Off | Off | | `api.analytics.filtered_activity.view` | On | On | On | On | Off | Off | Off | | `api.analytics.job_health_check` | On | On | On | On | Off | Off | Off | | `api.analytics.page_tracking` | On | On | On | On | Off | On | On | | `api.analytics.page_tracking.view` | On | On | On | On | Off | Off | Off | | `api.analytics.recent_activity` | On | On | On | On | Off | Off | Off | | `api.analytics.recent_activity.manage` | On | On | On | On | Off | Off | Off | | `api.analytics.simple_page_tracking` | On | On | On | On | Off | On | On | | `api.analytics.simple_page_tracking.manage` | On | On | On | On | Off | On | On | *** ### `api.calendar.*` — Calendar | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | --------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `api.calendar.jobs.read` | On | On | On | On | Off | On | On | | `api.calendar.weather.read` | On | On | On | On | Off | On | On | *** ### `api.contractors.*` — Contractors Controls contractor management — listings, maintenance trades, and certifications. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ----------------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `api.contractors.certification` | On | On | On | On | Off | On | On | | `api.contractors.certification.manage` | On | On | On | On | Off | On | On | | `api.contractors.list` | On | On | On | On | Off | Off | Off | | `api.contractors.list-with-coverage` | On | On | On | On | Off | Off | Off | | `api.contractors.list-with-coverage.view` | On | On | On | On | Off | Off | Off | | `api.contractors.list.list` | On | On | On | On | Off | Off | Off | | `api.contractors.list.manage` | On | On | On | On | Off | Off | Off | | `api.contractors.trades` | On | On | On | On | Off | On | On | | `api.contractors.trades.manage` | On | On | On | On | Off | On | On | *** ### `api.dashboard.*` — Dashboard Widgets Controls visibility of individual dashboard widgets, chiplets, and charts. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ------------------------------------------ | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | | `api.dashboard.batch.read` | On | On | On | On | Off | Off | Off | | `api.dashboard.booked_today.read` | On | On | On | On | Off | On | On | | `api.dashboard.charts` | On | Off | Off | Off | Off | Off | Off | | `api.dashboard.charts.manage` | On | Off | Off | Off | Off | Off | Off | | `api.dashboard.chiplets` | On | On | On | On | Off | On | On | | `api.dashboard.completed_jobs.read` | On | On | On | On | Off | On | On | | `api.dashboard.incomplete_onboarding.read` | On | On | On | On | Off | Off | Off | | `api.dashboard.jobs_by_type.read` | On | On | On | On | Off | On | On | | `api.dashboard.missing_certs.read` | On | On | On | On | Off | On | On | | `api.dashboard.new_jobs.read` | On | On | On | On | Off | On | On | | `api.dashboard.no_contractor.read` | On | On | On | On | Off | Off | Off | | `api.dashboard.overdue_quotes.read` | On | On | On | On | Off | Off | Off | | `api.dashboard.pinned_jobs.read` | On | On | On | On | Off | Off | Off | | `api.dashboard.recall.read` | On | On | On | On | Off | On | On | | `api.dashboard.secops_chiplets.read` | On | Off | Off | Off | Off | Off | Off | | `api.dashboard.stats` | On | On | On | On | Off | Off | Off | | `api.dashboard.stats.manage` | On | On | On | On | Off | Off | Off | | `api.dashboard.trial_account.read` | Off | Off | Off | Off | On | Off | Off | | `api.dashboard.update_job` | On | On | On | On | Off | Off | Off | | `api.dashboard.update_job.manage` | On | On | On | On | Off | Off | Off | *** ### `api.email.*` — Email | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | -------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | | `api.email.send` | On | On | On | On | On | On | On | | `api.email.send.manage` | On | On | On | On | On | On | On | | `api.email.templates` | On | On | On | On | Off | Off | Off | | `api.email.templates.view` | On | On | On | On | Off | Off | Off | | `api.email.verify` | On | On | On | On | On | On | On | | `api.email.verify.view` | On | On | On | On | On | On | On | | `api.email.welcome` | On | On | On | On | On | On | On | | `api.email.welcome.manage` | On | On | On | On | On | On | On | *** ### `api.financial.*` — Financial | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | | `api.financial.invoices` | On | On | On | On | Off | Off | Off | | `api.financial.invoices.manage` | On | On | On | On | Off | Off | Off | *** ### `api.jobs.*` — Jobs Management The largest API namespace. Controls all job CRUD, case notes, photos, documents, statuses, types, and more. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | --------------------------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `api.jobs.addresses` | On | On | On | On | Off | On | On | | `api.jobs.addresses.create` | On | On | On | On | Off | Off | Off | | `api.jobs.addresses.list` | On | On | On | On | Off | On | On | | `api.jobs.addresses.search` | On | On | On | On | Off | On | On | | `api.jobs.addresses.view` | On | On | On | On | Off | On | On | | `api.jobs.amend_request` | On | On | On | On | Off | Off | Off | | `api.jobs.amend_request.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.amend_request.read` | On | On | On | On | Off | Off | Off | | `api.jobs.amendable_fields` | On | On | On | On | Off | Off | Off | | `api.jobs.amendable_fields.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.case_note_attachments` | On | On | On | On | Off | On | On | | `api.jobs.case_note_attachments.manage` | On | On | On | On | Off | On | On | | `api.jobs.case_note_email_helper` | On | On | On | On | Off | On | On | | `api.jobs.case_note_email_helper.manage` | On | On | On | On | Off | On | On | | `api.jobs.case_notes` | On | On | On | On | Off | On | On | | `api.jobs.case_notes.create` | On | On | On | On | Off | On | On | | `api.jobs.case_notes.list` | On | On | On | On | Off | On | On | | `api.jobs.case_notes.manage` | On | On | On | On | Off | On | On | | `api.jobs.case_notes.pin` | On | On | On | On | Off | Off | Off | | `api.jobs.case_notes.resend` | On | On | On | On | Off | Off | Off | | `api.jobs.case_notes.unpin` | On | On | On | On | Off | Off | Off | | `api.jobs.case_notes.update` | On | On | On | On | Off | Off | Off | | `api.jobs.documents` | On | On | On | On | Off | On | On | | `api.jobs.documents.agent` | On | On | On | On | Off | Off | Off | | `api.jobs.documents.contractor` | On | On | On | On | Off | On | On | | `api.jobs.documents.manage` | On | On | On | On | Off | On | On | | `api.jobs.documents.private_client` | On | On | On | On | Off | Off | Off | | `api.jobs.documents.view` | On | On | On | On | Off | On | On | | `api.jobs.edit` | On | On | On | On | Off | On | On | | `api.jobs.manage` | On | On | On | On | Off | On | On | | `api.jobs.manage.create` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.created_by` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.get` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.get_agents` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.get_assignment_notification_state` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.get_clients` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.get_contractors` | On | On | On | On | Off | On | On | | `api.jobs.manage.get_creators` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.get_file_types` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.get_job_agents` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.get_job_clients` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.get_job_contractors` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.list` | On | On | On | On | Off | On | On | | `api.jobs.manage.list_commits` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.preview_delete` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.restore_archived_file` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.restore_commit` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.send_assignment_notification` | On | On | On | On | Off | Off | Off | | `api.jobs.manage.unarchive` | On | Off | Off | Off | Off | Off | Off | | `api.jobs.manage.update` | On | On | On | On | Off | Off | Off | | `api.jobs.mark_recall_completed` | On | On | On | On | Off | Off | Off | | `api.jobs.mark_recall_completed.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.payment_statuses` | On | On | On | On | Off | Off | Off | | `api.jobs.payment_statuses.list` | On | On | On | On | Off | Off | Off | | `api.jobs.payment_statuses.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.photos` | On | On | On | On | Off | On | On | | `api.jobs.photos.agent` | On | On | On | On | Off | Off | Off | | `api.jobs.photos.contractor` | On | On | On | On | Off | On | On | | `api.jobs.photos.delete` | On | On | On | On | Off | Off | Off | | `api.jobs.photos.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.photos.private_client` | On | On | On | On | Off | Off | Off | | `api.jobs.photos.upload` | On | On | On | On | Off | On | On | | `api.jobs.photos.view` | On | On | On | On | Off | On | On | | `api.jobs.priorities` | On | On | On | On | Off | On | On | | `api.jobs.priorities.list` | On | On | On | On | Off | On | On | | `api.jobs.priorities.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.recall` | On | On | On | On | Off | On | On | | `api.jobs.recall.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.remedials` | On | On | On | On | Off | Off | Off | | `api.jobs.remedials.link` | On | On | On | On | Off | Off | Off | | `api.jobs.remedials.list` | On | On | On | On | Off | Off | Off | | `api.jobs.remedials.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.remedials.unlink` | On | On | On | On | Off | Off | Off | | `api.jobs.statuses` | On | On | On | On | Off | On | On | | `api.jobs.statuses.list` | On | On | On | On | Off | On | On | | `api.jobs.statuses.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.time_ranges` | On | On | On | On | Off | On | On | | `api.jobs.time_ranges.list` | On | On | On | On | Off | On | On | | `api.jobs.time_ranges.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.toggle_pin` | On | On | On | On | Off | Off | Off | | `api.jobs.toggle_pin.manage` | On | On | On | On | Off | Off | Off | | `api.jobs.types` | On | On | On | On | Off | On | On | | `api.jobs.types.list` | On | On | On | On | Off | On | On | | `api.jobs.types.manage` | On | On | On | On | Off | Off | Off | *** ### `api.search.*` — Search | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | -------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------ | | `api.search.global` | On | On | On | On | Off | On | Off | | `api.search.global.manage` | On | On | On | On | Off | On | Off | *** ### `api.security.*` — Security Controls security features — file integrity, session management, CSRF, password breach scanning, and alerts. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | --------------------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `api.security.bulk_delete_alerts` | On | On | Off | Off | Off | Off | Off | | `api.security.bulk_delete_alerts.manage` | On | On | Off | Off | Off | Off | Off | | `api.security.bulk_resolve_alerts` | On | On | Off | Off | Off | Off | Off | | `api.security.bulk_resolve_alerts.manage` | On | On | Off | Off | Off | Off | Off | | `api.security.csrf_token` | On | On | On | On | Off | On | On | | `api.security.csrf_token.view` | On | On | On | On | Off | On | On | | `api.security.delete_alert` | On | On | Off | Off | Off | Off | Off | | `api.security.delete_alert.create` | On | On | Off | Off | Off | Off | Off | | `api.security.file_diff` | On | On | Off | Off | Off | Off | Off | | `api.security.file_diff.view` | On | On | Off | Off | Off | Off | Off | | `api.security.file_integrity_alerts` | On | On | Off | Off | Off | Off | Off | | `api.security.file_integrity_alerts.manage` | On | On | Off | Off | Off | Off | Off | | `api.security.file_integrity_progress` | On | On | Off | Off | Off | Off | Off | | `api.security.file_integrity_progress.manage` | On | On | Off | Off | Off | Off | Off | | `api.security.password_breach_check` | On | On | On | On | Off | Off | Off | | `api.security.password_breach_check.manage` | On | On | On | On | Off | Off | Off | | `api.security.resolve_alert` | On | On | Off | Off | Off | Off | Off | | `api.security.resolve_alert.manage` | On | On | Off | Off | Off | Off | Off | | `api.security.run_integrity_check` | On | On | On | On | Off | Off | Off | | `api.security.run_integrity_check.manage` | On | On | On | On | Off | Off | Off | | `api.security.sessions` | On | On | Off | Off | Off | Off | Off | | `api.security.sessions.add_to_blacklist` | On | On | Off | Off | Off | Off | Off | | `api.security.sessions.blacklist_add` | On | On | Off | Off | Off | Off | Off | | `api.security.sessions.blacklist_list` | On | On | Off | Off | Off | Off | Off | | `api.security.sessions.blacklist_remove` | On | On | Off | Off | Off | Off | Off | | `api.security.sessions.get_active_sessions` | On | On | Off | Off | Off | Off | Off | | `api.security.sessions.list` | On | On | Off | Off | Off | Off | Off | | `api.security.sessions.manage` | On | On | Off | Off | Off | Off | Off | | `api.security.sessions.remove_from_blacklist` | On | On | Off | Off | Off | Off | Off | | `api.security.sessions.terminate` | On | On | Off | Off | Off | Off | Off | | `api.security.sessions.terminate_session` | On | On | Off | Off | Off | Off | Off | *** ### `api.services.*` — Services | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | --------------------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | | `api.services.pricing` | On | On | On | On | Off | Off | Off | | `api.services.pricing.add_service_pricing` | On | On | On | On | Off | Off | Off | | `api.services.pricing.get_job_type_pricing` | On | On | On | On | Off | Off | Off | | `api.services.pricing.get_service_pricing` | On | On | On | On | Off | Off | Off | | `api.services.pricing.manage` | On | On | On | On | Off | Off | Off | | `api.services.pricing.remove_service_pricing` | On | On | On | On | Off | Off | Off | | `api.services.pricing.update_service_pricing` | On | On | On | On | Off | Off | Off | *** ### `api.sla.*` — SLA | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ---------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | | `api.sla.breached_jobs.read` | On | On | On | On | Off | Off | Off | *** ### `api.system.*` — System Controls core system operations — heartbeat, logs, maintenance mode, notices, notifications, and push messaging. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ------------------------------------ | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `api.system.attachment` | On | On | On | On | Off | On | On | | `api.system.attachment.view` | On | On | On | On | Off | On | On | | `api.system.heartbeat` | On | On | On | On | Off | On | On | | `api.system.heartbeat.manage` | On | On | On | On | Off | On | On | | `api.system.ios_notifications` | On | On | On | On | Off | On | On | | `api.system.logs.clear` | On | On | On | On | Off | Off | Off | | `api.system.logs.list` | On | On | On | On | Off | Off | Off | | `api.system.logs.read` | On | On | On | On | Off | Off | Off | | `api.system.maintenance_mode` | On | Off | Off | Off | Off | Off | Off | | `api.system.maintenance_mode.manage` | On | Off | Off | Off | Off | Off | Off | | `api.system.maintenance_mode.read` | On | Off | Off | Off | Off | Off | Off | | `api.system.notices` | On | On | On | On | Off | On | On | | `api.system.notices.dashboard` | On | On | On | On | Off | Off | Off | | `api.system.notices.list` | On | On | On | On | Off | On | On | | `api.system.notices.login` | On | On | On | On | Off | Off | Off | | `api.system.notices.manage` | On | On | On | On | Off | On | On | | `api.system.notifications` | On | On | On | On | Off | On | On | | `api.system.notifications.manage` | On | On | On | On | Off | On | On | | `api.system.search` | On | On | On | On | Off | On | On | | `api.system.search.manage` | On | On | On | On | Off | On | On | | `api.system.settings` | On | On | On | On | Off | Off | Off | | `api.system.settings.activate` | On | On | On | On | Off | Off | Off | | `api.system.settings.bulk_action` | On | On | On | On | Off | Off | Off | | `api.system.settings.deactivate` | On | On | On | On | Off | Off | Off | | `api.system.settings.delete_user` | On | On | On | On | Off | Off | Off | | `api.system.settings.get_users` | On | On | On | On | Off | Off | Off | | `api.system.settings.logout_user` | On | On | On | On | Off | Off | Off | | `api.system.settings.manage` | On | On | On | On | Off | Off | Off | | `api.system.settings.toggle_status` | On | On | On | On | Off | Off | Off | | `api.system.settings.update_user` | On | On | On | On | Off | Off | Off | | `api.system.status` | On | On | On | On | Off | On | On | | `api.system.status.manage` | On | On | On | On | Off | On | On | | `api.system.web_push_test.send` | On | Off | Off | Off | Off | Off | Off | *** ### `api.tenants.*` — Tenants | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ----------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `api.tenants.assign_address` | On | On | On | On | Off | Off | Off | | `api.tenants.assign_address.manage` | On | On | On | On | Off | Off | Off | | `api.tenants.gdpr_report` | On | On | On | Off | Off | Off | Off | | `api.tenants.gdpr_report.download` | On | On | On | Off | Off | Off | Off | | `api.tenants.gdpr_report.generate` | On | On | On | Off | Off | Off | Off | | `api.tenants.gdpr_report.list` | On | On | On | Off | Off | Off | Off | | `api.tenants.gdpr_report.view` | On | On | On | Off | Off | Off | Off | | `api.tenants.list` | On | On | On | On | Off | On | On | | `api.tenants.list.create` | On | On | On | On | Off | Off | Off | | `api.tenants.list.list` | On | On | On | On | Off | On | On | | `api.tenants.list.manage` | On | On | On | On | Off | Off | Off | | `api.tenants.manage` | On | On | On | On | Off | On | On | | `api.tenants.manage.bulk_delete` | On | On | Off | Off | Off | Off | Off | | `api.tenants.manage.create` | On | On | On | On | Off | Off | Off | | `api.tenants.manage.list` | On | On | On | On | Off | On | On | | `api.tenants.manage.manage` | On | On | On | On | Off | Off | Off | | `api.tenants.manage.update` | On | On | On | On | Off | Off | Off | *** ### `api.users.*` — Users & Staff | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | -------------------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `api.users.appearance` | On | Off | Off | Off | Off | Off | Off | | `api.users.appearance.manage` | On | On | On | On | Off | Off | Off | | `api.users.avatar` | On | On | On | On | Off | Off | Off | | `api.users.avatar.manage` | On | On | On | On | Off | Off | Off | | `api.users.edit` | On | On | On | On | Off | Off | Off | | `api.users.email_verification` | On | On | On | On | Off | Off | Off | | `api.users.email_verification.view` | On | On | On | On | Off | Off | Off | | `api.users.logout_user` | On | On | On | On | Off | Off | Off | | `api.users.logout_user.manage` | On | On | On | On | Off | Off | Off | | `api.users.notification_settings` | On | On | On | On | Off | Off | Off | | `api.users.notification_settings.manage` | On | On | On | On | Off | Off | Off | | `api.users.password_reset` | On | On | On | On | Off | Off | Off | | `api.users.password_reset.manage` | On | On | On | On | Off | Off | Off | | `api.users.permissions` | On | On | On | On | Off | Off | Off | | `api.users.permissions.view` | On | On | On | On | Off | Off | Off | | `api.users.user_avatar.read` | On | On | On | On | Off | On | On | | `api.users.user_profile_popover` | On | On | On | On | Off | Off | Off | | `api.users.user_profile_popover.manage` | On | On | On | On | Off | Off | Off | | `api.users.user_status` | On | On | On | On | Off | Off | Off | | `api.users.user_status.view` | On | On | On | On | Off | Off | Off | | `api.users.users` | On | On | On | On | Off | On | On | | `api.users.users.add_to_blacklist` | On | On | On | On | Off | Off | Off | | `api.users.users.bulk_update` | On | On | On | On | Off | Off | Off | | `api.users.users.complete_onboarding` | On | On | On | On | Off | On | On | | `api.users.users.create_user` | On | On | On | On | Off | Off | Off | | `api.users.users.delete_user` | On | On | On | On | Off | Off | Off | | `api.users.users.get_account_statuses` | On | On | On | On | Off | Off | Off | | `api.users.users.get_account_types` | On | On | On | On | Off | Off | Off | | `api.users.users.get_active_sessions` | On | On | On | On | Off | On | On | | `api.users.users.get_all_users` | On | On | On | On | Off | Off | Off | | `api.users.users.get_audit_log` | On | On | On | On | Off | Off | Off | | `api.users.users.get_password_breach_status` | On | On | On | On | Off | Off | Off | | `api.users.users.logout_user` | On | On | On | On | Off | Off | Off | | `api.users.users.manage` | On | On | On | On | Off | On | On | | `api.users.users.manage_roles` | On | On | On | On | Off | Off | Off | | `api.users.users.remove_from_blacklist` | On | On | On | On | Off | Off | Off | | `api.users.users.reset_onboarding_limit` | On | On | On | On | Off | Off | Off | | `api.users.users.scan_user_password` | On | On | On | On | Off | On | On | | `api.users.users.search` | On | On | On | On | Off | Off | Off | | `api.users.users.terminate_session` | On | On | On | On | Off | Off | Off | | `api.users.users.toggle_status` | On | On | On | On | Off | Off | Off | | `api.users.users.update_role` | On | On | On | On | Off | Off | Off | *** ### `api.whatsapp.*` — WhatsApp | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | | `api.whatsapp.send` | On | On | On | On | Off | Off | Off | *** ### `notifications.*` — Notification Targeting These keys are stored in the `api_permissions` table but control notification routing rather than API access. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | -------------------------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | ------------------------------ | ------------------------------ | | `notifications.admin.deployments.notify` | On | On | Off | Off | Off | Off | Off | | `notifications.admin.security.guard_access.notify` | On | On | Off | Off | Off | Off | Off | *** ### `page.analytics.*` — Analytics | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ------------------------ | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | ------------------------------ | ------------------------------ | | `page.analytics.reports` | On | On | Off | Off | Off | Off | Off | | `page.analytics.view` | On | On | Off | Off | Off | Off | Off | *** ### `page.branches.*` — Branches | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | -------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | | `page.branches.view` | On | On | On | On | Off | Off | Off | *** ### `page.calendar.*` — Calendar | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | -------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `page.calendar.view` | On | On | On | On | Off | On | On | *** ### `page.contractors.*` — Contractors | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | -------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | | `page.contractors.create` | On | On | On | On | Off | Off | Off | | `page.contractors.delete` | On | On | On | On | Off | Off | Off | | `page.contractors.edit` | On | On | On | On | Off | Off | Off | | `page.contractors.manage_trades` | On | On | On | On | Off | Off | Off | *** ### `page.dashboard.*` — Dashboard | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | -------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `page.dashboard.quick_stats` | On | On | Off | Off | Off | Off | Off | | `page.dashboard.security_report` | On | On | Off | Off | Off | Off | Off | | `page.dashboard.view` | On | On | On | On | Off | On | On | *** ### `page.electron.*` — Electron Desktop Sidepanels These permissions are only relevant when PropOps Web is running as an Electron desktop application. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | --------------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | | `page.electron.sidepanel` | On | On | On | On | Off | Off | Off | | `page.electron.sidepanel.ai_insights` | On | On | Off | Off | Off | Off | Off | | `page.electron.sidepanel.branch_fixflo` | On | On | On | On | Off | Off | Off | | `page.electron.sidepanel.calendar` | On | On | On | On | Off | Off | Off | | `page.electron.sidepanel.contacts` | On | On | On | On | Off | Off | Off | | `page.electron.sidepanel.job_health` | On | On | On | On | Off | Off | Off | | `page.electron.sidepanel.logs` | On | On | Off | Off | Off | Off | Off | | `page.electron.sidepanel.maps` | On | On | On | On | Off | Off | Off | | `page.electron.sidepanel.notifications` | On | On | On | On | Off | Off | Off | | `page.electron.sidepanel.pinned_jobs` | On | On | On | On | Off | Off | Off | | `page.electron.sidepanel.quick_actions` | On | On | On | On | Off | Off | Off | | `page.electron.sidepanel.sla` | On | On | On | On | Off | Off | Off | | `page.electron.sidepanel.weather` | On | On | On | On | Off | Off | Off | *** ### `page.financial.*` — Financial | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | ------------------------------ | | `page.financial.payments` | On | On | On | Off | Off | Off | Off | | `page.financial.view` | On | On | On | Off | Off | Off | Off | *** ### `page.job.*` — Jobs (Single) Controls access to job list, creation, editing, duplication, and read-only views. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | -------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `page.job.create` | On | On | On | On | Off | Off | Off | | `page.job.duplicate` | On | On | On | On | Off | Off | Off | | `page.job.edit` | On | On | On | On | Off | Off | Off | | `page.job.readonly` | On | On | On | On | Off | On | On | *** ### `page.jobs.*` — Jobs (List) | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ----------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `page.jobs.commits` | On | On | Off | Off | Off | Off | Off | | `page.jobs.manage_case_notes` | On | On | On | On | Off | On | On | | `page.jobs.manage_documents` | On | On | On | On | Off | On | On | | `page.jobs.manage_photos` | On | On | On | On | Off | On | On | | `page.jobs.quotes` | On | On | On | On | Off | Off | Off | | `page.jobs.recalls` | On | On | On | On | Off | On | Off | | `page.jobs.view` | On | On | On | On | Off | On | On | | `page.jobs.view_all` | On | On | On | On | Off | On | Off | *** ### `page.map.*` — Map | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | --------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | | `page.map.view` | On | On | On | On | Off | Off | Off | *** ### `page.notifications.*` — Notifications | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | --------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `page.notifications.manage` | On | On | On | On | Off | On | On | | `page.notifications.view` | On | On | On | On | Off | On | On | *** ### `page.reports.*` — Reports | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ----------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | ------------------------------ | | `page.reports.financial` | On | On | On | Off | Off | Off | Off | | `page.reports.job_inspection` | On | On | On | Off | Off | Off | Off | | `page.reports.users` | On | On | On | Off | Off | Off | Off | *** ### `page.search.*` — Search | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ----------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | | `page.search.recent_accounts` | On | On | On | Off | Off | Off | Off | | `page.search.recent_jobs` | On | On | On | On | Off | Off | Off | | `page.search.view` | On | On | On | On | Off | Off | Off | *** ### `page.security.*` — Security | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | -------------------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | ------------------------------ | ------------------------------ | | `page.security.bypass_password_requirements` | On | Off | Off | Off | Off | Off | Off | | `page.security.file_integrity` | On | On | Off | Off | Off | Off | Off | | `page.security.password_breach_scanning` | On | On | Off | Off | Off | Off | Off | *** ### `page.settings.*` — Settings & Administration The largest page namespace. Controls access to every page within the Settings area. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ----------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | | `page.settings.account_permissions` | On | On | On | Off | Off | Off | Off | | `page.settings.activity_log` | On | On | Off | Off | Off | Off | Off | | `page.settings.all_users` | On | On | On | On | Off | Off | Off | | `page.settings.api_monitoring` | On | On | Off | Off | Off | Off | Off | | `page.settings.background_patterns` | On | Off | Off | Off | Off | Off | Off | | `page.settings.branch_management` | On | On | On | On | Off | Off | Off | | `page.settings.brand_management` | On | Off | Off | Off | Off | Off | Off | | `page.settings.configuration` | On | On | Off | On | Off | Off | Off | | `page.settings.cron_jobs` | On | On | Off | Off | Off | Off | Off | | `page.settings.data_generator` | On | On | Off | Off | Off | Off | Off | | `page.settings.documents` | On | On | Off | Off | Off | Off | Off | | `page.settings.email_logs` | On | On | Off | Off | Off | Off | Off | | `page.settings.environment` | On | On | Off | Off | Off | Off | Off | | `page.settings.file_integrity` | On | On | Off | Off | Off | Off | Off | | `page.settings.job_documents` | On | On | Off | Off | Off | Off | Off | | `page.settings.maintenance_mode` | On | Off | Off | Off | Off | Off | Off | | `page.settings.notices` | On | On | Off | Off | Off | Off | Off | | `page.settings.orphaned_files` | On | On | Off | Off | Off | Off | Off | | `page.settings.password_breach` | On | On | Off | Off | Off | Off | Off | | `page.settings.security` | On | On | Off | Off | Off | Off | Off | | `page.settings.sessions` | On | On | Off | Off | Off | Off | Off | | `page.settings.sessions_blacklist` | On | On | Off | Off | Off | Off | Off | | `page.settings.staff` | On | On | Off | On | Off | Off | Off | | `page.settings.staff_permissions` | On | On | Off | Off | Off | Off | Off | | `page.settings.system_status` | On | On | Off | On | Off | Off | Off | | `page.settings.tenant_management` | On | On | On | On | Off | Off | Off | | `page.settings.user_roles` | On | Off | Off | Off | Off | Off | Off | | `page.settings.visibility` | On | Off | Off | Off | Off | Off | Off | | `page.settings.whatsapp_templates` | On | On | On | On | Off | Off | Off | *** ### `page.system.*` — System | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ---------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | ------------------------------ | | `page.system.activity_log` | On | On | Off | Off | Off | Off | Off | | `page.system.api_monitoring` | On | On | Off | Off | Off | Off | Off | | `page.system.file_integrity` | On | On | Off | Off | Off | Off | Off | | `page.system.job-tags` | On | On | Off | Off | Off | Off | Off | | `page.system.logs` | On | On | Off | Off | Off | Off | Off | | `page.system.security` | On | On | Off | Off | Off | Off | Off | | `page.system.view` | On | On | On | Off | Off | Off | Off | *** ### `page.tenants.*` — Tenants | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | --------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------ | | `page.tenants.create` | On | On | On | On | Off | On | Off | | `page.tenants.delete` | On | On | On | On | Off | Off | Off | | `page.tenants.edit` | On | On | On | On | Off | On | Off | *** ### `page.users.*` — User Management Controls access to user management, including per-account-type tab visibility and creation buttons. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ----------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | ------------------------------ | | `page.users.create` | On | On | Off | On | Off | Off | Off | | `page.users.force_logout` | On | On | Off | Off | Off | Off | Off | | `page.users.manage_roles` | On | On | Off | Off | Off | Off | Off | | `page.users.view` | On | On | On | On | Off | Off | Off | | `page.users.view_agents` | On | On | On | On | Off | Off | Off | | `page.users.view_contractors` | On | On | On | On | Off | Off | Off | | `page.users.view_landlords` | On | On | On | On | Off | Off | Off | | `page.users.view_staff` | On | On | Off | Off | Off | Off | Off | | `page.users.view_tenants` | On | On | On | On | Off | Off | Off | *** ### `document.*` — Document Permissions Document permissions are dynamic — generated from the `job_file_types` database table. Each document type gets `.upload`, `.read`, and `.delete` keys. | Permission Key | SysOps | Director | Finance | Maint. Coord. | Min. Access | Agent | Contractor | | ------------------------------------------------ | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------- | ------------------------------ | ------------------------------- | ------------------------------- | | `document.cleaning_requirements.delete` | On | On | On | On | Off | Off | Off | | `document.cleaning_requirements.read` | On | On | On | On | Off | On | On | | `document.cleaning_requirements.upload` | On | On | On | On | Off | Off | Off | | `document.contractors_quote.delete` | On | On | On | On | Off | Off | Off | | `document.contractors_quote.read` | On | On | On | On | Off | Off | On | | `document.contractors_quote.upload` | On | On | On | On | Off | Off | On | | `document.deposit_invoice.delete` | On | On | On | On | Off | Off | Off | | `document.deposit_invoice.read` | On | On | On | On | Off | On | Off | | `document.deposit_invoice.upload` | On | On | On | On | Off | Off | Off | | `document.eicr_certificate.delete` | On | On | On | On | Off | Off | Off | | `document.eicr_certificate.read` | On | On | On | On | Off | On | On | | `document.eicr_certificate.upload` | On | On | On | On | Off | Off | On | | `document.energy_performance_certificate.delete` | On | On | On | On | Off | Off | Off | | `document.energy_performance_certificate.read` | On | On | On | On | Off | Off | On | | `document.energy_performance_certificate.upload` | On | On | On | On | Off | Off | On | | `document.floor_plan.delete` | On | On | On | On | Off | Off | Off | | `document.floor_plan.read` | On | On | On | On | Off | On | On | | `document.floor_plan.upload` | On | On | On | On | Off | Off | On | | `document.go_ahead_instruction.delete` | On | On | On | On | Off | Off | Off | | `document.go_ahead_instruction.read` | On | On | On | On | Off | On | Off | | `document.go_ahead_instruction.upload` | On | On | On | On | Off | On | Off | | `document.gsc_certificate.delete` | On | On | On | On | Off | Off | Off | | `document.gsc_certificate.read` | On | On | On | On | Off | On | On | | `document.gsc_certificate.upload` | On | On | On | On | Off | Off | On | | `document.invoice.delete` | On | On | On | On | Off | Off | Off | | `document.invoice.read` | On | On | On | On | Off | On | Off | | `document.invoice.upload` | On | On | On | On | Off | Off | Off | | `document.lra_certificate.delete` | On | On | On | On | Off | Off | Off | | `document.lra_certificate.read` | On | On | On | On | Off | On | On | | `document.lra_certificate.upload` | On | On | On | On | Off | Off | On | | `document.pat_test_certificate.delete` | On | On | On | On | Off | Off | Off | | `document.pat_test_certificate.read` | On | On | On | On | Off | On | On | | `document.pat_test_certificate.upload` | On | On | On | On | Off | Off | On | | `document.purchase_order.delete` | On | On | On | On | Off | Off | Off | | `document.purchase_order.read` | On | On | On | On | Off | On | Off | | `document.purchase_order.upload` | On | On | On | On | Off | On | Off | | `document.quote.delete` | On | On | On | On | Off | Off | Off | | `document.quote.read` | On | On | On | On | Off | On | Off | | `document.quote.upload` | On | On | On | On | Off | Off | Off | | `document.warning_notice.delete` | On | On | On | On | Off | Off | Off | | `document.warning_notice.read` | On | On | On | On | Off | On | On | | `document.warning_notice.upload` | On | On | On | On | Off | Off | On | | `document.works_order.delete` | On | On | On | On | Off | Off | Off | | `document.works_order.read` | On | On | On | On | Off | On | Off | | `document.works_order.upload` | On | On | On | On | Off | On | Off |