Organization & Permissions

Purpose {#purpose}

Tenant administration: master data, users, roles, import, audit, and data privacy.

Navigation: Sidebar Organization → /app/organization

Permissions: organization.settings, organization.manage_members, organization.manage_roles, audit.read, organization.data_export

Master Data {#master-data}

/app/organization/stammdaten

Permission: organization.settings

Manage Users {#manage-users}

/app/organization/access (formerly /app/organization/users)

Invite a User {#invite-a-user}

1. Invite user — enter email address
2. Assign role(s)
3. Invitation email is sent

Permissions: users.invite, organization.manage_members

Remove a User {#remove-a-user}

End membership — the user loses access to the tenant.

Permission: users.remove

Assign Roles {#assign-roles}

Each user has one or more roles. Roles bundle permissions.

Roles and Permissions {#roles-and-permissions}

/app/organization/access → tab Roles or /app/organization/roles

Built-in Roles {#built-in-roles}

The Administrator role can only be assigned by the tenant owner.

When creating a tenant on the platform, the first invited email automatically receives the Administrator role and the Owner badge (owner_user_id).

Custom roles can be created with any combination of permissions.

PDF and Labels {#pdf-and-labels}

/app/organization/pdf

Data Import {#data-import}

/app/organization/import

Import pipeline for master and inventory data:

1. Upload CSV/file
2. Map columns
3. Preview and validate
4. Start import — errors are logged

Permission: organization.settings

Partners (Inventory Coupling) {#partners-inventory-coupling}

/app/organization/partners — see Partners & Rental Requests.

Audit Log {#audit-log}

/app/organization/audit

Chronological list of all relevant changes:

• Order status
• Logistics corrections
• Bookings
• User actions

Filter by time period, user, and entity.

Permission: audit.read

Data Privacy & GDPR {#data-privacy-gdpr}

/app/organization/data-privacy

Permission: organization.data_export

Platform admins can also trigger exports via /platform — see GDPR & Export.

Permissions Reference {#permissions-reference}

All valid permissions in the system:

Organization {#organization}

Orders {#orders}

Logistics {#logistics}

Inventory & Workshop {#inventory-workshop}

Customers, Crew, Calendar {#customers-crew-calendar}

Search & Documents {#search-documents}

Default Roles: Included Permissions {#default-roles-included-permissions}

Member (member): Read orders, workflow, calendar, search, read customers, read crew, own assignments, read inventory, view logistics, report to workshop.

Logistics (logistics): Member + pack, shop, order documents, write logistics. Can create workshop reports (not edit tickets).

Workshop (workshop): Member + edit workshop tickets, run/release inspections, notifications for open tickets and inspections.

Crew Lead (crew_manager): Member + manage/plan crew, assign crew, write logistics.

Dispatch (dispatcher): Almost all permissions except organization administration and workshop management/inspections (creating reports remains possible).

Administrator (admin): Organization settings, members, roles, audit, workshop, inspections, reports — no automatic full_access.

Note: organization.full_access grants all permissions and is only assigned in special cases.

Last updated: July 2026