> For the complete documentation index, see [llms.txt](https://hub.equipme.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hub.equipme.io/equipme/settings-1/roles-and-rights/roles-and-permissions.md).

# Roles & Permissions

## Permissions by Module

This guide breaks down permissions based on the sidebar menu in equipme. Use the legend below to understand the access level.

#### **Legend:**

| Icon | Type               | Description                                         |
| :--: | ------------------ | --------------------------------------------------- |
|   ✅  | **Execute / Edit** | Can create, edit, approve, or place binding orders. |
|  🔍  | **View Only**      | Can only view data. No changes or orders allowed.   |

***

### My Company (Organization)

*Management of employees, locations, and organizational structure.*

| Role                 | Right | Scope / Context                                                          |
| -------------------- | :---: | ------------------------------------------------------------------------ |
| **Administrator**    |   ✅   | **All Employees:** Can create, edit, and delete all users and locations. |
| **Supervisor**       |   ✅   | **Own Team:** Can edit profiles of their own team members.               |
| **Team Manager**     |   🔍  | **Own Team:** Read-only list of team members (cannot edit).              |
| **Location Manager** |   ✅   | **Location:** Can edit details of their assigned physical location.      |

***

### Marketplace

*The central hub for browsing products and requesting equipment.*

| Role           | Right | Action Description                                                       |
| -------------- | :---: | ------------------------------------------------------------------------ |
| **User**       |   ✅   | **Request:** Can fill cart and trigger the approval process.             |
| **Planner**    |   ✅   | **Prepare:** Can configure carts and save as drafts, but **cannot** buy. |
| **Buyer**      |   ✅   | **Buy:** Can trigger binding orders to suppliers.                        |
| **Controller** |   🔍  | **View:** Can see marketplace items/prices but cannot order.             |

***

### Approvals

*Where managers review and authorize requests.*

| Role                 | Right | Approval Scope                                                        |
| -------------------- | :---: | --------------------------------------------------------------------- |
| **Team Manager**     |   ✅   | **Own Team:** Approves requests from direct reports.                  |
| **Supervisor**       |   ✅   | **Own Team:** Same as Team Mgr (often with higher budget limits).     |
| **Location Manager** |   ✅   | **Location:** Approves requests tied to their specific building/site. |
| **Business Owner**   |   ✅   | **Service:** Approves requests for specific services they own.        |

***

### Assets

*Inventory, Warehouse Management, and Service Catalog.*

| Role                  | Right | Scope / Context                                                  |
| --------------------- | :---: | ---------------------------------------------------------------- |
| **Portfolio Manager** |   ✅   | **Service Catalog:** Defines the internal service catalog.       |
| **Business Owner**    |   ✅   | **Inventory:** Manages and customizes services assigned to them. |
| **Location Manager**  |   🔍  | **Warehouse:** Can often view asset stock for their location.    |

***

### Controlling

*Financial oversight, Order history, and Invoices.*

| Role              | Right | Scope / Context                                                         |
| ----------------- | :---: | ----------------------------------------------------------------------- |
| **Controller**    |   ✅   | **Invoices:** Can manage and process invoices.                          |
| **Controller**    |   🔍  | **Orders & Costs:** Read-only access to organization spending/reports.  |
| **Buyer**         |   🔍  | **Orders:** Views order history and status (often location-restricted). |
| **Administrator** |   ✅   | **Config:** Can export data and change controlling settings.            |

***

### Offer Management

*Service Portfolio definition and Order Processing configuration.*

| Role                  | Right | Scope / Context                                                         |
| --------------------- | :---: | ----------------------------------------------------------------------- |
| **Portfolio Manager** |   ✅   | **Full Access:** Manages the entire service portfolio structure.        |
| **Supervisor**        |   ✅   | **Team Offers:** Can configure specific service bundles for their team. |
| **Buyer**             |   🔍  | **Processing:** Can view order processing rules (depends on config).    |

***

### Automation & Settings

*System configuration and technical setup.*

| Role                 | Right | Scope / Context                                                      |
| -------------------- | :---: | -------------------------------------------------------------------- |
| **Administrator**    |   ✅   | **System:** Full global configuration (SSO, Settings, Integrations). |
| **Automation Admin** |   ✅   | **Builder:** Can create and edit Workflows and Integrations.         |
| **Automation User**  |   ✅   | **Task Runner:** Can only execute manual "People Tasks".             |
| **Service Desk**     |   ✅   | **Tickets:** Can edit and process support tickets.                   |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://hub.equipme.io/equipme/settings-1/roles-and-rights/roles-and-permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
