Roles and access
Every person sees their own work. Nothing more, nothing less.
HelioLattice gives you 269 permission controls across 26 areas of the product. Build the roles your company actually has, decide what each can see and do, and limit data to own, assigned or managed records. Margins, approvals and delivery stages stay with the right people.
What is role-based access in HelioLattice? Every user holds one or more roles. A role is a set of permissions across modules, reports and the personal work queue. Data scopes then limit which records the person can see, such as all, assigned to them, or managed by them.
- AllowedEnquiriesCreate, update and call, assigned records only
- AllowedQuotationsCreate and submit for approval
- HiddenInternal costingMargins and base cost
- No accessFinance claimsApproval and posting
How it works
Roles, scopes, locks and a record of it all.
Four layers work together, so access follows the way your company is organised.
Build roles
Create a role, choose its permissions module by module, set its report access and what appears in its work queue. Duplicate a role to make a variation.
Set the scope
Decide whether a role sees all records, only the ones assigned to the user, or the ones managed by the user and their team.
Lock the stages
A delivery stage that is assigned to someone can be edited by that person. Others read it, unless they hold an override permission.
Keep the record
Important actions are written to an audit log that administrators can search, and a user and role activity report shows who did what.
What it does
Flexible where you need it, firm where it matters.
269 permission controls
Permissions cover leads, quotations, surveys, projects, materials, accounts, reports, partners, attendance and administration, grouped into 26 areas.
- Grouped by module
- Assigned role by role
Custom roles
Start from the roles you need, such as sales executive, project manager, accountant or auditor, and adjust them. Users can hold more than one role and switch between them.
- Matrix editor for each role
- Duplicate to create variants
Data scopes
Limit a role to the records assigned to the user, or open it to records managed by the user and their reports, or to all records.
- Assigned or managed
- Managers see their team's work
Margins stay private
Internal costing and margins are visible only to roles with that permission. Sales sees customer prices without seeing what a job costs you.
- Cost and margin hidden
- Approval queue by permission
Separation of duties
On money claims, the person who raised a claim cannot verify it. Submit, verify, approve and post are separate permissions.
- Self-verification blocked
- Reviewer and approver recorded
Audit log
Administrators can search a log of security-relevant actions, and a report shows user and role activity across the company.
- Searchable audit log
- Login mode and session limits
Who sees what
The same job, seen differently by each desk.
A surveyor needs the site details, the sales head needs the quote and its margin, the accountant needs the payments, and the owner needs all of it. Roles make that the default, so nobody has to ask for a screenshot.
- A role per desk, tuned to your company
- Data limited to own, assigned or managed records
- Reports and work queue follow the role
- Sensitive screens hidden entirely
Example entries with illustrative data.
Partners
Channel partners are kept entirely outside your team's system.
Partners sign in to a separate portal with its own login. They see their own leads and commission status and nothing else, while your staff manage them from inside.
- Separate authentication for partners
- Partner sees only their own leads and commissions
- Staff permissions to approve and manage partners
Example entries with illustrative data.
Starter roles
Ready-made roles you can adapt.
HelioLattice includes starter roles for the common desks of a solar company. Adjust or duplicate any of them.
Sales
Sales manager, sales executive, quotation generator, quotation approver.
Projects
Project manager, site engineer, field technician, document collector.
Accounts
Finance manager, accountant, project accountant, AR and AP executives, stock accountant, auditor.
Administration
Super admin, admin, partner portal manager, attendance roles, customer support.
Questions
Common questions.
Can we create our own roles?
Can a salesperson be limited to their own enquiries?
Can we hide margins from the sales team?
Is there an audit log?
Can a person approve their own expense?
Map your team into roles.
Bring a list of the people and desks in your company and we will show how roles and scopes would look.