Roles & who sees what

What it’s for — everyone in your workspace has a role, and the role decides what they can open and change. A central permission matrix checks every action on the server — not just in the menus — so this isn’t cosmetic: the server enforces it even if a screen didn’t hide something.

The roles

⤢

Each person gets one role. The legend spells out what each role can do; the checkboxes add fine-grained permissions.

Craneye has 9 workspace roles:

• Owner — sees and can do everything in the workspace, including team and billing admin.
• Management — broad access across the business.
• Operations — day-to-day running of jobs, crew and dispatch.
• Engineering — lift planning and technical work.
• Sales — contacts, quotes and the commercial pipeline.
• Accounts — the money side: invoices and payments.
• Workshop — maintenance jobs, parts and stock.
• Auditor — read-only oversight, including the audit log.
• Field crew — the Craneye mobile app: daily logs and location while on an active job.

The matrix, not memorising a list

What matters day to day isn’t memorising each role’s exact edges — it’s that every one of the roughly 240 actions in Craneye is checked against a role (and its flags) before it’s allowed. If something’s greyed out or missing for you, it’s the matrix, not a bug.

Fine-grained flags

On top of the role, a person can be given extra capability flags that widen exactly what they see:

• View contract values — read access to commercial values (rates, contract amounts) for a role that wouldn’t otherwise see them.
• View costs — visibility of internal costs (supplier, sub-hire and parts costs) across the fleet and maintenance areas.
• View crew location — access to live crew positions on the map.
• Export — permission to export data out of the workspace.

Without the matching flag, those figures aren’t hidden by a UI trick — the server never sends them to that person in the first place.

Why a colleague's screen looks different

If a teammate can’t see money on a job, that’s their role (and flags) at work — not a bug. Change roles and flags on the Team & roles screen (owners only).

How each role reaches Craneye

• Field crew use the Craneye mobile app.
• Operations and Workshop also get the mobile toolkit, in addition to the web app.
• Accounts and the other office roles work in the web app.

How people get an account

• Office roles (Owner, Management, Operations, Engineering, Sales, Accounts, Workshop, Auditor) join through an emailed invite — see Team & roles.
• Field crew logins are created directly by an owner or operations, with an email and password — there’s no invite email for the field app.

Safety isn't a role setting

Roles control visibility and editing. They do not let anyone skip the dispatch safety gate — only a manager/owner can override a blocked dispatch, and always with a recorded reason.

Common questions

• Why can’t I see a page I expect to? Your role (or a missing capability flag) doesn’t cover it. Ask an owner to check your role and flags on the Team & roles screen.
• Does a higher role ever bypass the dispatch gate? No. Only the manager-override flow bypasses a block, and it always requires a typed reason that’s recorded.
• Can a field crew member log into the web app? No — field crew use the Craneye mobile app only.

Related

Team & roles Invite people and set their role.

Settings & branding Workspace-wide options.

Dispatch & the safety gate Why roles can't bypass it.