The permission system in enrutar is designed to be simple to understand and easy to maintain, avoiding complex configurations with dozens of combinations. For this reason, each employee must have exactly one of these three levels: Restricted Access, Management Access or Full Access.

Permission levels in enrutar

---

Full Access

Gives complete access to the entire application within the organization, including permission management.

• Full access to all entities.
• Can manage roles and access levels (with one exception: cannot change their own access level).

Management Access

Gives access to all daily operations, but limits sensitive actions related to account administration.

• Full access to almost the entire application.
• Cannot manage the subscription and payments section.
• Cannot change roles or access levels of users.

Restricted Access

This is the most limited level and is designed for field staff. It is built around the work order as the central piece.

The logic is:

• If an employee is added as an assignee of a work order, or as an operator in an appointment of a work order, then they gain access to everything related to that work order.
• This includes, for example:
  • All appointments of the work order
  • Comments on the work order
  • Documents linked to the work order
  • The associated customer (including phone and other necessary data)
  • Linked Work Reports
  • Linked Material Lists

This philosophy allows a person with restricted access to have everything they need to carry out the appointment (for example, calling the customer), without opening access to information that doesn't concern them.

Permission table

---

General permission rules

Permission Level	Read Access	Write Access	Special Rules
RESTRICTED	Only assigned entities (via calculated assignment)	Very limited (see rules per entity)	Designed for field staff with minimal editing permissions
MANAGEMENT	All entities in the organization	Full on most entities	Cannot change user roles or access levels
FULL	All entities in the organization	Full	Can change roles and access levels (except their own access level)

Permission tables by entity

Work Orders

Permission	Read	Create	Update	Delete	Bulk Operations	Special
RESTRICTED	Only where calculated assignment applies	❌	❌	❌	❌	✅ Can update status of assigned work orders
MANAGEMENT	All	✅	✅	✅	✅	-
FULL	All	✅	✅	✅	✅	-

Notes:

• Calculated assignment includes: assignment to the work order OR assignment to an appointment of the work order
• RESTRICTED can access archived work orders if they were assigned before archiving

Appointments

Permission	Read	Create	Update	Delete	Update Status	Generate Reports
RESTRICTED	Only for assigned work orders OR assigned to the appointment	❌	❌	❌	✅ For accessible appointments	✅ Only for themselves
MANAGEMENT	All	✅	✅	✅	✅	✅ For all users
FULL	All	✅	✅	✅	✅	✅ For all users

Materials

Permission	Read	Create	Update	Delete	Complete / Uncomplete
RESTRICTED	Only for assigned work orders	❌	❌	❌	✅ For assigned work orders (including archived ones)
MANAGEMENT	All	✅	✅	✅	✅
FULL	All	✅	✅	✅	✅

Customers

Permission	Read	Create	Update	Delete	Access to phones/emails
RESTRICTED	Only with assigned work orders	❌	❌	❌	✅ For accessible customers
MANAGEMENT	All	✅	✅	✅	✅
FULL	All	✅	✅	✅	✅

Notes:

• RESTRICTED can access customers with archived work orders if they were assigned before archiving

Routes

Permission	Read	Create	Update	Delete	Assign / Unassign
RESTRICTED	✅ All	❌	❌	❌	❌
MANAGEMENT	✅ All	✅	✅	✅	✅
FULL	✅ All	✅	✅	✅	✅

Checklist templates

Permission	Read	Create	Update	Delete	Complete / Uncomplete items
RESTRICTED	✅ All	❌	❌	❌	✅ If assigned to the appointment
MANAGEMENT	✅ All	✅	✅	✅	✅
FULL	✅ All	✅	✅	✅	✅

Tags

Permission	Read	Create	Update	Delete
RESTRICTED	✅ All	❌	❌	❌
MANAGEMENT	✅ All	✅	✅	✅
FULL	✅ All	✅	✅	✅

Work order statuses

Permission	Read	Create	Update	Delete
RESTRICTED	✅ All	❌	❌	❌
MANAGEMENT	✅ All	✅	✅	✅
FULL	✅ All	✅	✅	✅

Time entries

Permission	Read	Create	Update	Delete
RESTRICTED	✅ Own only	❌	❌	❌
MANAGEMENT	✅ All	✅	✅	✅
FULL	✅ All	✅	✅	✅

Work reports

Permission	Read	Create	Update	Delete
RESTRICTED	✅ For assigned work orders OR created by themselves	✅ Only for assigned work orders	✅ Only reports created by themselves	✅ Only reports created by themselves
MANAGEMENT	✅ All	✅	✅	✅
FULL	✅ All	✅	✅	✅

Notes:

• RESTRICTED can access reports from archived work orders if they were assigned before archiving

Reports

Permission	Statistics	Time entry report
RESTRICTED	❌	✅ Own records only
MANAGEMENT	✅	✅ All records
FULL	✅	✅ All records

Users

Permission	Read	Update self	Update others	Change role	Change access level	Change status
RESTRICTED	✅ All	✅ (name, email, phone only)	❌	❌ (not own)	❌ (not own)	❌ (not own)
MANAGEMENT	✅ All	✅	✅ (except role/access)	❌	❌	✅
FULL	✅ All	✅	✅	✅	✅ (not own)	✅

Customer context in sidebar

Permission	Work Orders	Appointments	Reports	Threads
RESTRICTED	✅ Only for customers with assigned work orders	✅ Only for customers with assigned work orders	✅ Only for customers with assigned work orders	✅ Only for customers with assigned work orders
MANAGEMENT	✅ All	✅ All	✅ All	✅ All
FULL	✅ All	✅ All	✅ All	✅ All

Key concepts

Calculated assignment: a user is considered assigned by calculation to a work order if:

• They are directly assigned to the work order, OR
• They are assigned to at least one appointment of that work order

Archived work orders: RESTRICTED users maintain access to archived work orders/materials/customers/reports if they were assigned before archiving.

Related entities

• Work Orders
• Assignees
• Appointments
• Comments
• Customers
• Documents
• Employees
• Material Lists
• Work Reports