RBAC System Overview
PraticOS uses a role-based access control system (RBAC - Role-Based Access Control) to manage permissions for each company's collaborators.
Multi-Tenancy
A user can have different profiles in different companies. For example, be an Administrator in one company and a Technician in another.
Available Profiles
The system has 5 distinct profiles, each designed to serve different roles within the organization:
Administrator
Full access. Configures the company, manages users, and accesses all data.
Complete ManagementManager
Focus on results. Views billing and costs, but does not execute services.
FinancialSupervisor
Coordinates teams and equipment. Does not view financial values.
OperationalConsultant
Creates quotes. Views prices, but accesses only their own Service Orders.
CommercialTechnician
Executes services. Does not view prices and has limited editing after SO approval.
ExecutionAdministrator
Full access. Configures the company, manages users, and accesses all data.
Manager (Financial)
Focus on results. Views billing and costs, but does not execute services.
Full access to financial data. Can edit values and access billing reports. Cannot assign technicians or execute services.
Supervisor
Coordinates teams and equipment. Does not view financial values.
No Financial Access
This profile does not view values, prices, billing, or financial reports. Ideal for collaborators focused on operations.
Consultant (Sales)
Creates quotes. Views prices, but accesses only their own Service Orders.
Limited Visibility
The Consultant only views SOs they created. In case of vacation or absence, the Administrator can reassign SOs to another consultant.
Technician
Executes services. Does not view prices and has limited editing after SO approval.
Operational Profile
Focus on execution. Does not view financial values and has limited editing in SOs after approval.
Permission Matrix
Consolidated view of all permissions by profile. See each profile's section for details.
Status-Based Rules
Editing permissions vary according to the current SO status. Full editing in 'Quote' status, limited after approval.
Frequently Asked Questions
Can a user have different profiles in different companies?
Yes. The system supports multi-tenancy, where a user can be Admin in one company and Technician in another.
What happens if a profile is not recognized?
The system normalizes to "technician" (least privilege) for security.