Roles & Restrictions Permissions

The Roles & Restrictions category defines a user's functional identity within SecurityTrax. Unlike most other categories that control what a user can see or do to records, these permissions control what a user is (their role), what can be assigned to them, and what parts of their own profile they are allowed to modify.

Roles

Role permissions determine whether a user appears in role-specific lists (e.g., technician dropdowns, sales rep assignment lists). They do not grant access to records -- other permission categories handle that.

Permission	Access Levels	What It Controls
Is A Technician	Yes	Marks the user as a technician. They appear in technician assignment lists and scheduling.
Is A Sales Representative	Yes	Marks the user as a sales representative. They appear in sales rep assignment lists.
Is A Lead Representative	Yes	Marks the user as a lead representative. They appear in lead rep assignment lists.
Is A Tech Administrator	Yes	Marks the user as a tech administrator. They can oversee technician operations.
Is An At-Risk Representative	Yes	Marks the user as an at-risk representative. They appear in at-risk assignment lists for customer retention workflows.

Assignability

These permissions control what types of work items can be assigned to the user.

Permission	Access Levels	What It Controls
Can Have Tickets Assigned	Yes	Allows tickets to be assigned to this user.
Can Have Lead Tickets Assigned	Yes	Allows lead-specific tickets to be assigned to this user.
Can Have Work Orders Assigned	Yes	Allows work orders to be assigned to this user.
Can Have Sales Appointments Assigned	Yes	Allows sales appointments to be assigned to this user.
Personal Appointments	View, Create, Modify, Delete	Controls the user's ability to manage their own personal calendar appointments.

Time Off

These permissions control who can schedule time off and for whom.

Permission	Access Levels	What It Controls
Can Schedule Tech/Sales Time Off	Yes	Base permission for scheduling time off. Required before the sub-permissions below take effect.
All But Yourself	Yes	Allows scheduling time off for any user except yourself.
Hierarchy	Yes	Allows scheduling time off for users who are descendants in the organizational hierarchy.
Self	Yes	Allows scheduling time off for yourself.

Inventory

Permission	Access Levels	What It Controls
Can Create Purchase Requisitions	Yes	Allows the user to create purchase requisition records.
Can View On Hand Inventory Counts	Yes	Allows the user to see on-hand inventory count information.
View Personal Inventory	Yes	Allows the user to view their own personal inventory (equipment checked out to them).

Personal

Permission	Access Levels	What It Controls
Can View Personal Payroll Information	Yes	Allows the user to view their own payroll information.
Allow Remote Scheduling	Yes	Allows the user to use remote scheduling features.
Can Request Leads From The Queue	Yes	Allows the user to request leads from the lead queue.

User Restrictions

User restrictions are inverse permissions -- they prevent users from modifying specific sections of user profile pages. When enabled, the named section becomes read-only for the affected user. The All-Access group is exempt from all user restrictions.

Permission	Access Levels	What It Controls
Restrict User Account Information	Yes	Prevents modifying the account information section of user profiles.
Restrict User Human Resource Information	Yes	Prevents modifying the human resource section of user profiles.
Restrict User Inventory Information	Yes	Prevents modifying the inventory section of user profiles.
Restrict User Password Information	Yes	Prevents modifying the password section of user profiles.
Restrict User Permission Group Information	Yes	Prevents modifying the permission group assignments on user profiles.
Restrict User Preferences Information	Yes	Prevents modifying the preferences section of user profiles.
Restrict User Representative Numbers Information	Yes	Prevents modifying the representative numbers section of user profiles.
Restrict User Settings Information	Yes	Prevents modifying the settings section of user profiles.

Tips

Role permissions define what a user IS, not what they can see. Marking someone as "Is A Technician" makes them appear in tech dropdowns and scheduling -- it does not grant them access to customer records or work orders.
Assignability permissions work alongside role permissions. A user typically needs both the role (e.g., Is A Technician) and the assignability (e.g., Can Have Work Orders Assigned) to fully function in that role.
Time Off sub-permissions require the base "Can Schedule Tech/Sales Time Off" permission first. The three sub-permissions (All But Yourself, Hierarchy, Self) can be combined as needed.
User Restrictions block modifications, not visibility. A restricted section is read-only, not hidden.
The All-Access group is exempt from all user restrictions. Members of the All-Access group can always modify all sections regardless of restriction settings.