Predefined Role Permissions
Exact permissions included in each predefined role
Predefined Role Permissions
This page documents the exact permissions included in each of the three predefined roles: Member, Manager, and Admin.
Member Role
Description: Basic company member with personal booking capabilities
Permissions (6 total)
| Permission | Category |
|---|---|
| Read User Booking Requests | Booking Requests |
| Write User Booking Requests | Booking Requests |
| Read Travelers | Travelers |
| Write Travelers | Travelers |
| Read User Passports | Passports |
| Write User Passports | Passports |
Capabilities
Can do:
- Search for flights and hotels
- Book travel (subject to policies)
- Submit booking requests when approval is required
- Manage personal travelers
- Upload and view passport documents
- View assigned policies
Cannot do:
- Access the admin dashboard
- View other users' bookings
- Approve or reject booking requests
- Manage users, roles, or company settings
- Configure policies or budgets
Use Cases
- Standard employees
- New hires (default role)
- Contractors with booking needs
- Any user who only needs personal travel capabilities
Manager Role
Description: Company manager with team oversight and approval capabilities
Permissions (11 total)
| Permission | Category |
|---|---|
| Access Company Dashboard | Dashboard |
| Read Companies | Companies |
| Read Booking Requests | Booking Requests |
| Process Booking Requests | Booking Requests |
| Read Users | Users |
| Read Travelers | Travelers |
| Write Travelers | Travelers |
| Read User Booking Requests | Booking Requests |
| Write User Booking Requests | Booking Requests |
| Read User Passports | Passports |
| Write User Passports | Passports |
Capabilities
Includes all Member capabilities, plus:
- Access the admin dashboard
- View all company booking requests
- Approve or reject booking requests
- View the user list (read-only)
- View all traveler profiles
Cannot do:
- Create or edit users
- Manage roles
- Configure policies
- Configure budgets
- Change company settings
- Manage delegations
Use Cases
- Department managers
- Team leads
- Travel coordinators with approval authority
- Supervisors who need to review travel requests
Admin Role
Description: Company administrator with full access to company settings and user management
Permissions (27 total)
| Category | Permissions |
|---|---|
| Dashboard Access | Access Company Dashboard |
| Company Management | Read Companies, Write Companies |
| Users Management | Read Users, Write Users, Delete Users |
| Roles Management | Read Company Roles, Write Company Roles, Delete Company Roles |
| Policies Management | Read Policies, Write Policies, Delete Policies |
| Budgets Management | Read Budgets, Write Budgets, Delete Budgets |
| Booking Requests | Read Booking Requests, Process Booking Requests, Update Booking Requests, Read User Booking Requests, Write User Booking Requests |
| Travelers & Passports | Read Travelers, Write Travelers, Read User Passports, Write User Passports |
| Delegations | Read Delegations, Write Delegations, Delete Delegations |
Capabilities
Includes all Manager capabilities, plus:
- Full user account management
- Create and manage custom roles
- Configure travel policies
- Set up budgets and cost centers
- Manage delegation relationships
- Modify company settings
Use Cases
- Company travel managers
- HR administrators
- Company owners
- IT administrators managing travel platform
Role Comparison Matrix
By Permission Category
| Category | Member | Manager | Admin |
|---|---|---|---|
| Dashboard Access | ❌ | ✅ | ✅ |
| Company Management | ❌ | Read | Read + Write |
| Users Management | ❌ | Read | Full |
| Roles Management | ❌ | ❌ | Full |
| Travelers | Read + Write | Read + Write | Read + Write |
| Passports | Own | All | All |
| Policies | ❌ | ❌ | Full |
| Budgets | ❌ | ❌ | Full |
| Booking Requests | Own | All + Approve | Full |
| Delegations | ❌ | ❌ | Full |
By Capability
| Capability | Member | Manager | Admin |
|---|---|---|---|
| Book travel | ✅ | ✅ | ✅ |
| Manage own travelers | ✅ | ✅ | ✅ |
| View own bookings | ✅ | ✅ | ✅ |
| Access dashboard | ❌ | ✅ | ✅ |
| View all bookings | ❌ | ✅ | ✅ |
| Approve/reject requests | ❌ | ✅ | ✅ |
| Manage users | ❌ | ❌ | ✅ |
| Manage roles | ❌ | ❌ | ✅ |
| Configure policies | ❌ | ❌ | ✅ |
| Configure budgets | ❌ | ❌ | ✅ |
| Manage delegations | ❌ | ❌ | ✅ |
| Company settings | ❌ | ❌ | ✅ |
Permission Inheritance
Predefined roles are designed to progressively include more permissions. Each higher role includes all permissions from lower roles, plus additional capabilities.
When to Use Each Role
| Role | Assign To | Reason |
|---|---|---|
| Member | All employees by default | Minimum access needed for booking |
| Manager | Team supervisors | Need to approve team travel requests |
| Admin | Travel managers, HR | Full company configuration access |
Custom Roles Alternative
If predefined roles don't fit your needs:
| Scenario | Solution |
|---|---|
| Manager + policy viewing | Create custom role with Manager permissions plus Read Policies |
| Admin without delete | Create custom role with Admin permissions minus delete permissions |
| Approver only | Create custom role with only approval-related permissions |
| Budget viewer | Create custom role with Read Budgets plus Access Company Dashboard |
See Creating Roles for custom role creation.