Stakeholders, departments, roles
Three things together decide what you see. Your stakeholder is the kind of organisation you belong to. If you are inside ATI's Administration, your department narrows it further. And your role is the named job title that actually carries the page permissions.
Administration is split into three departments — Administration, Finance and Procurement — and each sees a different part of the system. Project Management is a separate stakeholder for ATI's own engineering team, which maintains configuration and takes no part in the pipeline.
The twelve roles
These are seeded system roles. They cannot be renamed or deleted, though their page permissions — apart from Super Admin's — can be edited in Control Unit.
| Role | Belongs to | Broadly sees |
|---|---|---|
| Super Admin | Administration | The eleven Set Up pages plus Dashboard, Reports and Organization |
| Administration Admin | Administration | Dashboard, Reports and Organization only — no Set Up |
| Managing Director | Administration | Six executive pages, read and export only |
| Chief Information Officer | Administration | The same six pages, read and export only |
| Finance Admin | Finance | The Finance module, minus the three reserved account-manager pages |
| Senior Account Manager | Finance | Bill Authorization, Payment Preparation Pending, All Bills |
| Assistant Account Manager | Finance | Billing Processing, Vat Tax Record, All Bills |
| Procurement Admin | Procurement | The Procurement and Inventory modules, plus five Set Up pages |
| Client Admin | Client | The six client pages, across the whole organisation |
| Unit Admin | Client | The same six pages, narrowed to one client unit |
| Vendor Admin | Vendor | The six Vendor pages, plus Dashboard and All Purchase Orders |
| Software Engineer | Project Management | Set Up for its own team only — Users, Core Management, Role Designation |
Three pages nobody else can be given
| Page | Reserved for | Why |
|---|---|---|
| Bill Authorization | Senior Account Manager | Final authorisation must rest with one accountable person |
| Billing Processing | Assistant Account Manager | Settlement is deliberately separated from authorisation |
| Vat Tax Record | Assistant Account Manager | Document collection follows settlement |
These are revoked from every other non-superuser role each time the system is re-seeded, so granting one of them in Control Unit will not hold. If somebody needs to authorise payments, they need the Senior Account Manager role — not a permission.
What Super Admin cannot do
Super Admin bypasses ordinary permission checks, but three things stay off-limits. This surprises people, so it is worth stating plainly.
- Client-only and Vendor-only pages. Stakeholder exclusivity applies to the superuser too — a Super Admin cannot open a client's Create Requisition or a vendor's Shipment page.
- Inventory. It is explicitly excluded from the superuser's pages — it belongs to Procurement.
- Editing its own permissions. Control Unit shows Super Admin's own matrix read-only, and an attempt to change it is rejected.
Super Admin also holds no Finance or Procurement page at all: the Finance module belongs to Finance and the Procurement module to Procurement. Its own pages are Set Up and Overview.
Why can I not see a page?
Work down this list in order. The answer is almost always one of the first three.
- Have you signed out and back in since your access changed? Permissions are read into your session at sign-in. This is the answer more often than anything else on this list.
- Is the page exclusive to another stakeholder? A client-only or vendor-only page cannot be granted to anyone else, whatever their role.
- Is it one of the three reserved Finance pages? Those follow the role, and no grant will override that.
- Is the page a card inside Set Up? The sidebar shows one Set Up entry; the pages themselves are cards, and you only see the cards you hold.
- Has the page been assigned to your department? A department must hold a page before a role inside it can be granted the page. An administrator checks this in Control Unit.
- If you can open the page but it is empty, this is probably not a permission problem at all — for a Finance account manager it is almost always a missing client mapping, and for a client user it is unit scoping.