Understanding Roles and Permissions

Feature available on the Admin Web Dashboard ( 🖥️ ) and/or Corfix Mobile App (📱)

Roles and Permissions are found in the Corfix Admin under;

My Account Details > Manage Roles.

General Permissions:

Projects:

Accounts:

Tasks:

Templates:

Certifications:

Binders:

Assets:

COR Audit:

 

Reports:

Roles:

Chats:

Group Permissions:

Timekeeping Permissions:

Company Permissions:

Integration Permissions:

Departmental Access Strategy

By segmenting your roles by department, you ensure that employees aren't overwhelmed by features they don't use, while also protecting sensitive company data. Below are some ideas.

The Accountant Role (Timekeeping & Payroll)

Financial data is the most sensitive information in your system. This role should be "laser-focused" on the numbers.

• Access: Full permissions for Timekeeping and Payroll reports.

• Restriction: Restrict access to Project files, Safety Folders, or Worker Certifications unless they specifically impact payroll.

• Benefit: The Accountant doesn't get distracted by daily progress photos or safety inspections, and field workers' hourly rates remain confidential.

The Project Manager Role (Projects, Forms & Scheduling)

PMs need a "bird's eye view" of the job site operations but rarely need to touch the backend accounting configurations.

• Access: High-level access to Scheduling, Form Submissions, and Project Documentation.

• Specifics: They should be able to create tasks, assign workers to schedules, and review/approve daily logs and EHS forms.

• Restriction: Limit their ability to "Finalize" payroll or modify company-wide form templates to ensure data consistency across the whole company.

---

Why This Matters: The "Signal vs. Noise" Ratio

When a Project Manager opens their app, they shouldn't have to scroll past payroll tax settings to find their daily log. By configuring these "siloed" roles:

• Data Integrity: Users can’t accidentally break a workflow they don’t understand.

• Onboarding Speed: New hires learn the system faster because they only see 3 buttons instead of 10.

• Security: You significantly reduce the risk of internal data leaks.
  
  

---

Other Best Practices

Audit Your "Admin" Roles

"Admin" is a heavy title in Corfix. True Admins can modify form templates, delete users, and change company configurations.

• Limit Admins: Stick to 2–3 trusted individuals.

• Use "Power Users": For people who need to manage data but shouldn't be touching the backend settings, create a custom role with high-level viewing and reporting rights instead of full Admin status.

Test Before Syncing

Before onboarding a whole crew, create a "Test User" account. Log in to the mobile app with that test account assigned to your new role to ensure:

1. The user can see the right forms.

2. The user cannot see sensitive info (like other people's pay rates or private HR documents).