RahalCorporate
Roles & PermissionsConcepts

Predefined Roles

Understanding the three built-in roles in every company

Predefined Roles

Every company in Rahal comes with three predefined roles that cover the most common organizational needs.

Overview

RoleTypical UsersDashboard Access
MemberStandard employees
ManagerTeam leads, supervisors
AdminTravel managers, HR

Member Role

The Member role is designed for standard employees who need to book travel for themselves and their travelers.

Permissions (6 total)

PermissionDescription
Read User Booking RequestsView own booking requests
Write User Booking RequestsSubmit booking requests
Read TravelersView traveler profiles
Write TravelersCreate and edit travelers
Read User PassportsView own passports
Write User PassportsManage passport documents

Capabilities

Members can:

  • Search for flights and hotels
  • Book travel (subject to policies)
  • Submit booking requests when approval is required
  • Manage their own travelers
  • Upload passport documents
  • View their booking history

Members cannot:

  • Access the admin dashboard
  • View other users' bookings
  • Approve booking requests
  • Manage company settings

Default Assignment

New users who self-register are automatically assigned the Member role.

Manager Role

The Manager role is designed for team supervisors who need oversight of team travel activities.

Permissions (11 total)

PermissionDescription
Access Company DashboardAccess admin dashboard
Read CompaniesView company information
Read Booking RequestsView all booking requests
Process Booking RequestsApprove/reject requests
Read UsersView user list
Read TravelersView all travelers
Write TravelersManage travelers
Read User Booking RequestsView own requests
Write User Booking RequestsSubmit requests
Read User PassportsView passports
Write User PassportsManage passports

Capabilities

Managers can do everything Members can, plus:

  • Access the admin dashboard
  • View all company booking requests
  • Approve or reject booking requests
  • View user list (read-only)
  • View all traveler profiles

Managers cannot:

  • Create or edit users
  • Manage roles
  • Configure policies or budgets
  • Change company settings

Use Cases

  • Department heads reviewing team travel
  • Supervisors approving travel requests
  • Team leads monitoring travel spending

Admin Role

The Admin role has full access to company configuration and user management.

Permissions (27 total)

CategoryPermissions
DashboardAccess Company Dashboard
CompanyRead Companies, Write Companies
UsersRead Users, Write Users, Delete Users
RolesRead Company Roles, Write Company Roles, Delete Company Roles
PoliciesRead Policies, Write Policies, Delete Policies
BudgetsRead Budgets, Write Budgets, Delete Budgets
Booking RequestsRead Booking Requests, Process Booking Requests, Update Booking Requests, Read User Booking Requests, Write User Booking Requests
TravelersRead Travelers, Write Travelers
PassportsRead User Passports, Write User Passports
DelegationsRead Delegations, Write Delegations, Delete Delegations

Capabilities

Admins have complete control over the company:

  • All Member and Manager capabilities
  • User account management
  • Role creation and assignment
  • Policy configuration
  • Budget setup and monitoring
  • Delegation management
  • Company settings

Best Practices

  • Limit Admin access to trusted personnel
  • Consider creating custom roles for partial admin access
  • Use Admin role for travel managers and HR personnel

Customizing Predefined Roles

You can customize the display name and description of predefined roles:

CustomizableNot Customizable
✅ Display name❌ Role code
✅ Description❌ Permission set

To have different permissions than the predefined roles offer, create a custom role instead.

Role Comparison

CapabilityMemberManagerAdmin
Book travel
Manage own travelers
View own bookings
Access dashboard
View all bookings
Approve/reject requests
Manage users
Configure policies
Manage budgets
Create roles
Company settings

On this page