All Permissions
Complete reference of all permissions available in Rahal
All Permissions
This page lists every permission available for company roles in Rahal, organized by category.
Dashboard Access
Control access to the admin dashboard.
| Permission | Effect |
|---|---|
| Access Company Dashboard | Required to log into the dashboard interface |
Without this permission, users can only access the booking application, not the admin dashboard.
Company Management
Manage company settings and configuration.
| Permission | Effect |
|---|---|
| Read Companies | See company details, settings, and configuration |
| Write Companies | Edit company name, settings, domain configuration |
| Delete Companies | Permanently delete a company (platform admin only) |
Delete Companies is a sensitive permission typically reserved for platform administrators.
Users Management
Manage user accounts within the company.
| Permission | Effect |
|---|---|
| Read Users | See user list, profiles, and role assignments |
| Write Users | Add new users, modify profiles, change role assignments |
| Delete Users | Delete user accounts from the company |
Roles Management
Manage company roles and their permissions.
| Permission | Effect |
|---|---|
| Read Company Roles | See role list, view role details and permissions |
| Write Company Roles | Create custom roles, modify role permissions |
| Delete Company Roles | Delete custom roles (predefined cannot be deleted) |
Role Management Constraints
| Action | Required Permission | Constraints |
|---|---|---|
| View roles | Read Company Roles | None |
| Create custom role | Write Company Roles | Code must be unique |
| Edit custom role | Write Company Roles | None |
| Edit predefined role | Write Company Roles | Name/description only |
| Delete custom role | Delete Company Roles | No users assigned |
| Delete predefined role | — | Not allowed |
Travelers Management
Manage traveler profiles.
| Permission | Effect |
|---|---|
| Read Travelers | See all traveler profiles in the company |
| Write Travelers | Create, edit, and delete traveler profiles |
All users have base access to their own travelers. These permissions extend access to all company travelers.
Passports Management
Manage passport and travel documents.
| Permission | Effect |
|---|---|
| Read User Passports | See passport documents and details |
| Write User Passports | Upload, edit, and delete passport documents |
Both permissions apply to all document categories: passports, visas, residency permits, and other travel documents.
Policies Management
Configure travel policies.
| Permission | Effect |
|---|---|
| Read Policies | See policy configurations, rules, and assignments |
| Write Policies | Create, edit policies and their rules |
| Delete Policies | Delete policies |
Budgets Management
Configure budgets and cost centers.
| Permission | Effect |
|---|---|
| Read Budgets | See budgets, allocations, consumption, and assignments |
| Write Budgets | Create, edit budgets and configure periods |
| Delete Budgets | Delete budgets |
Booking Requests
Process and manage booking requests.
| Permission | Effect |
|---|---|
| Read Booking Requests | See all company booking requests |
| Process Booking Requests | Approve or reject booking requests |
| Update Booking Requests | Edit request details (notes, services) |
| Read User Booking Requests | See only the current user's requests |
| Write User Booking Requests | Create new booking requests |
Common Permission Combinations
| Use Case | Permissions Needed |
|---|---|
| Standard employee | Read/Write User Booking Requests |
| Manager (approver) | Above + Read Booking Requests + Process Booking Requests |
| Admin | All booking request permissions |
Delegations Management
Manage user delegation relationships.
| Permission | Effect |
|---|---|
| Read Delegations | See delegation relationships and scopes |
| Write Delegations | Create new delegation relationships |
| Delete Delegations | Revoke existing delegations |
Permission Categories Summary
| Category | Count | Typical Recipients |
|---|---|---|
| Dashboard Access | 1 | Manager, Admin |
| Company Management | 3 | Admin only |
| Users Management | 3 | Admin only |
| Roles Management | 3 | Admin only |
| Travelers | 2 | Manager, Admin |
| Passports | 2 | All roles |
| Policies | 3 | Admin only |
| Budgets | 3 | Admin only |
| Booking Requests | 5 | Varies by role |
| Delegations | 3 | Admin only |
Base User Permissions
Every company user automatically has these permissions regardless of role:
| Permission | Effect |
|---|---|
| Read/Book Hotel Offers | Search and book hotels |
| Read/Book Flight Offers | Search and book flights |
| Read/Write Travelers | Manage own travelers |
| Read/Write User Passports | Manage own passports |
| Read/Write User Booking Requests | View and submit own requests |
| Read User Policies | View assigned policies |
These are not part of role permissions but are inherent to every authenticated user.