Roles & Permissions
Goal: To define the security boundaries of your organization and ensure users only see the tools necessary for their specific job function.
The Roles section is the security engine of Blue Roster. In a corporate environment, not everyone should have the power to change a production workload or approve vacation time. Roles allow you to create "profiles" (e.g., Administrator, Supervisor, Team Lead) and assign them to users so the interface stays clean and secure.
Admin vs. Employee Roles
Blue Roster distinguishes between two primary environments:
Admin Application Roles: These are for the "Power Users." These roles allow access to the backend catalogs, workload planning, and the Action Center.
Employee Application Roles: These are for the general workforce. These roles are typically limited to viewing their own schedule, requesting time off, and bidding on overtime.
Creating and Editing Roles
When you open a role to edit it, you will see a comprehensive list of every feature in the system.
Step-by-Step: Setting up a New Role
Start New: Click the Add button in the Roles menu.
Define Identity: Enter a Name (e.g., "Night Shift Supervisor") and a Description.
Select the System: Choose which application this role applies to (Administrator or Employee).
Granular Permissions: Scroll through the list of features (Action Center, Catalogs, Gantt, etc.) and toggle them:
Full Access: Can see, create, edit, and delete.
Read Only: Can see the data but cannot change it.
No Access: The menu item will completely disappear from their sidebar.
Save: Once saved, you can apply this role to any user in the User Catalog.
Permission Logic: The "Supervisor" Example
A common setup for a Supervisor Role might look like this:
Action Center: Full Access (to fill holes and manage daily gaps).
Gantt: Read Only (to view the timeline without changing the production plan).
Catalogs: No Access (to prevent accidental changes to job skills or department structures).
Roles: No Access (supervisors generally should not be able to change their own permissions).
Pro-Tips for Role Management
Start Lean: It is safer to give a user less access and increase it later than to give everyone "Full Admin" access from the start.
The Version Number: Notice the version number under the logo (Top Left). When Blue Roster updates, new features may appear in the Roles checklist. Check back after updates to see if new permissions need to be toggled.
Initial Setup: When you first sign in as an Admin, you are likely a "Full Access Admin." Use this role to build the more restricted roles for the rest of your management team.
