Roles and Permissions
Company roles with an access level for each module - who can see and edit what.
In the Company and All for business plans, what a regular user can see and do in the app is decided by their Role. The company names and sets up its roles itself (for example Site Manager, Labourer, Accountant) and assigns one role to each user. You will find them in the menu under Lists → Roles.
How access works
The user card (the Users module) has two fields:
- Práva (Rights) - Admin or User. An administrator always has full access to everything and does not need a Role.
- Role - for a User, it sets the access level for each module. Without a Role the user would see nothing, so the app pre-fills the Uživatel (User) role for new users.
Above this there are two rules that a Role cannot override:
- Plan - a module that the company's plan does not include cannot be opened by any level.
- Administrator only - user management and Company settings are always reserved for the administrator. The levels for the Users, Human resources and General modules do not change that.
In the Diary and Diary+ plans, Roles are not used and the Role field is not shown on the user card. Every user sees the modules of the plan except Users and Inquiries, which only the administrator has. Projects, creating and sharing the construction diary and contacts are also managed only by the administrator. Assigned Roles stay saved in case you move to a higher plan.
Access levels
| Level | What the user can do |
|---|---|
| nepřístupný (no access) | Does not see the module, it is not shown in their menu |
| čtení (read) | View records, cannot create or edit anything |
| editace vlastních (edit own) | Create records and edit or delete only those they created themselves |
| editace (edit) | Create, edit and delete all records in the module |
A higher level includes the lower ones: a user with editace can also read. Some menu items require a higher level, for example Wages appears in the Finance menu only with the editace level, and Plánovací okno (Planning board) only with at least editace vlastních for the Calendar module.
Creating and editing a role
- Open Lists → Roles and click Přidat roli (Add role). To open an existing role, click it in the list.
- On the Oprávnění (Permissions) tab, enter the Název role (Role name).
- For each module, choose the Úroveň (Level). The Nastavit vše na čtení (Set all to read) button sets all modules to read, then you only need to adjust the exceptions.
- Optionally set the role switches and superior roles (see below).
- Save with the Založit (Create) button (Upravit (Edit) for an existing role).
The list of roles shows the creation date, the name and the superior roles. A change to a role applies to all users who have it assigned.
A module that was added to the app after the role was created is marked in the role with the nový (new) label and has the nepřístupný level. So after new features appear in the app, go through your roles and give access to the new modules to whoever should have it.
Modules in the role editor
The role editor lists all modules of the app, including those your plan does not have. The most important ones:
| Module in the editor | What it opens |
|---|---|
| Dashboard | The Dashboard |
| Diary records, Daily entries, Access | The Construction diary, its daily entries and diary sharing |
| Work reports, Trips | Work reports and Transport |
| Calendar, My calendar, Tasks, Teams | The Planning section, see Plan |
| Price quotes, Purchase orders, Sales orders, Delivery notes, Tenders | The Sales section (Tenders = inquiries) |
| Sales invoices, Purchase invoices, Document inbox, Invoice documents, Payments, Cashflow, Wages | The Finance section |
| Reports, Advanced reports | The Reports section: the Reports module opens the Výkazy práce (Work reports) report. Reports with company-wide figures (Stavba, Náklady, Výdělečnost zakázek, Ziskovost strojů) are visible only to the administrator. |
| Projects, Contacts, Machines, Rented machines, Equipment, Training | The registers of the same name |
| Event types, Pre-accounting, Tax types, Expense categories, Construction categories | Company code lists in the menu Settings → General |
| Roles | This page with role management |
Role switches
On the Oprávnění tab there are four switches above the list of modules:
- Zobrazení názvu stavby (Project name display) - whether users with this role see the Název stavby (Project name) or the Interní název (Internal name).
- Vidí plán celé firmy (Sees the whole company's plan) - Celá firma (Whole company): the web Calendar with its PDF export and Gantt show users with this role the events of the whole company. Jen vlastní (Own only): they see in them only events they created themselves, events they are assigned to, and the plan of the projects they lead (according to the Plán u vedoucího stavby switch). Until you change the switch, it follows the level for the Calendar module: with the editace level, the whole company, otherwise own only. A user without access to Calendar never sees the whole company's plan. My calendar, the dashboard, Utilization, the Planning board, the mobile app and the synchronized calendar always show users only this limited scope; the administrator always sees the whole plan.
- Plán u vedoucího stavby (Plan for the project leader) - Celý plán (Full plan: the leader sees the whole plan of the projects they lead, including other people's personal entries), or Omezený plán (Limited plan: they see what is assigned to them, their own entries and, on their projects, only projects and trips).
- Doklady jen z dopravy (Transport documents only) - for transport dispatchers: in quotes, sales orders and invoices they see only documents linked to Transport, and only their own purchase orders and invoice documents. Off = documents of the whole company according to the module levels.
Role hierarchy
On the Hierarchie (Hierarchy) tab, use the Přidat nadřízenou roli (Add superior role) button to set which roles are superior to this role. The hierarchy decides who receives requests for leave, sick leave and attendance corrections for approval, unless the company has a fixed approver set in Company settings. If there is no superior, the first administrator created in the company approves. More in Leave and sick leave.
Attendance
If the company has attendance time tracking turned on, the role gets an extra Docházka (Attendance) tab. For each attendance button (Práce (Work), Home office, Služební cesta (Business trip), Oběd (Lunch), Lékař (Doctor), Odchod (Departure)) you set whether it is Povoleno (Allowed) or Zakázáno (Blocked) for the role. See Attendance.
Site manager
A site manager is not a separate role or account type. A user becomes a site manager when you set them as the leader of a project (see Projects). On the projects they lead, they then keep the construction diary (even if their Role only allows reading the diary), approve work reports and see the data of the whole project. What they see of the plan is controlled by the Plán u vedoucího stavby switch in their role.
Ready-made roles
A new company gets ready-made roles that you can freely edit, rename or delete, and you can add your own to match how the company works. Always keep the Uživatel role - the app assigns it to new users and to users without a role when the company moves from the Diary plan to Company.
When a user reports that they cannot see a module or cannot create records, look at the labels next to their name in the user list (for example Nemůže do deníku (Cannot use the diary)). Clicking the label opens the user card with the Role field highlighted.