User roles govern access permissions across the Aetos platform. By assigning specific roles, administrators define who can manage physical assets, configure maintenance schedules, track employee training, or execute field work orders.
The Five Platform Roles
Aetos uses five distinct roles to partition platform clearance and manage access:
1. Super Admin
Description: Global platform administrator.
Access Scope: Oversees all operations across the platform.
Capabilities: Can create new organization workspaces, configure system-wide settings, manage global listings, and add or delete any user account on the platform.
2. Admin
Description: Organization-wide manager.
Access Scope: Limited to their designated organization, but holds full clearance across all locations within that organization.
Capabilities: Can add, edit, and delete users, locations, and assets. Admins can configure organization-wide settings, edit maintenance types, manage the master files library, and generate or delete compliance and labor reports.
3. Location Admin
Description: Location-specific operations manager.
Access Scope: Administrative permissions are strictly scoped to explicitly assigned physical Locations.
Capabilities: Within their assigned Locations, they can create and edit assets, assign work orders, manage local checklist templates, and oversee field personnel. They are blocked from accessing or editing organization-level configurations, billing, or assets and users assigned to other Locations.
4. Employee
Description: Standard operational worker.
Access Scope: Permitted to view and interact with assets, scans, and courses across their assigned Locations.
Capabilities: Can browse the active assets directory, navigate 3D facility scans, check off checklist tasks on work orders, log labor time, and self-enroll in published training courses via the All Courses page.
5. Employee Limited Access
Description: Highly restricted operational worker.
Access Scope: Can only interact with work orders and training modules explicitly assigned to them.
Capabilities: Can execute assigned work order checklists and complete assigned training courses via their personal dashboard. They are restricted from browsing the broader assets directory, searching general facility directories, or navigating general facility scans outside of their active assignments.
Role Matrix Quick Reference
Action | Super Admin | Admin | Location Admin | Employee | Employee Limited Access |
|---|---|---|---|---|---|
Manage Org Settings | Yes | Yes | No | No | No |
Create Locations | Yes | Yes | No | No | No |
Create Assets | Yes | Yes | Yes (Assigned Locations) | No | No |
Place Asset Tags | Yes | Yes | Yes (Assigned Locations) | No | No |
Assign Work Orders | Yes | Yes | Yes (Assigned Locations) | No | No |
Log Labor Time | Yes | Yes | Yes | Yes | Yes |
Close Work Orders | Yes | Yes | Yes (Assigned Locations) | No | No |
Browse All Assets | Yes | Yes | Yes (Assigned Locations) | Yes (Assigned Locations) | No |
Browse All Courses | Yes | Yes | Yes (Assigned Locations) | Yes (Assigned Locations) | No |
See Also
How to Create a New User
Configuring Location Admin Permissions
Setting Employee Permissions for Training
Reports Permissions and Access Control