Roles and permissions
AInventory defines three hierarchical roles: User, Admin, and Owner. Each role accumulates the permissions of the previous one. The role is assigned per tenant; the same user can have different roles in different tenants.
Permissions table
| Function | User | Admin | Owner |
|---|---|---|---|
| View forecast for assigned phases | ✅ | ✅ | ✅ |
| Edit forecast for assigned phases | ✅ | ✅ | ✅ |
| View KPIs and FVA | ✅ | ✅ | ✅ |
| View change history | ✅ | ✅ | ✅ |
| Access Configuration | ❌ | ✅ | ✅ |
| Manage versions and phases | ❌ | ✅ | ✅ |
| View change history for all users | ❌ | ✅ | ✅ |
| View all tenants | ❌ | ❌ | ✅ |
| Manage tenants | ❌ | ❌ | ✅ |
| Manage partners | ❌ | ❌ | ✅ |
Role descriptions
User
The base role. Can operate the planning workflow within the phases assigned to their profile: view and edit the forecast, consult KPIs, FVA, and history. Has no access to company configuration or cycle management (versions and phases).
Admin
Extends the User role with configuration and monthly cycle management capabilities: can open and close versions, configure phases, access the tenant's inventory parameters, and review the change history for all users.
Owner
Platform-level role. In addition to everything an Admin can do, the Owner can view and manage multiple tenants and their associated partners. This role is assigned to the Directrix account administrator or to the client's technical manager with multi-company access.
The role controls what a user can do, but the assigned phases in the user profile control which part of the forecast they can view and edit. A user can have the User role but no assigned phases, in which case they will see no editable data.