Roles and Permissions

Six roles

The roles split along two lines: who runs the work, and who sees the money. Most of the surprises in the table below come from that split.

Admin is the only complete role. Manager runs almost everything short of the team. Operations runs the work but is kept away from pricing. Finance handles money and quoting but not the operational record. CEO is oversight, with billing authority and little day-to-day access. Viewer looks and nothing more.

Where a role is set

Roles are assigned when an account is created and changed from the member's own menu afterwards. Each change is confirmed by name, showing the role being left and the role being taken.

Changing your own role is one-way. An Admin who steps down needs another Admin to restore it, which is worth remembering in an organization with only one.

Who can do what

The table below covers the tasks people actually ask about. Two things shape it beyond the role itself: some actions belong to one side of a job only, so a requester cannot change a status however senior they are, and a few are limited by plan rather than by role.

Pricing is the sharpest line

Operations cannot see pricing. Not tariff items, not cost prices, not quote values, anywhere in the app. That is deliberate: an operations team can run port calls, update jobs, and manage vessels without ever seeing what the work is worth.

It has one consequence worth knowing. Operations can add services and set port coverage but cannot price them, so a service switched on by Operations needs a Manager or Finance to make it quotable.

Viewer, and what read-only means

Viewer sees the record and changes nothing. It is stricter than it sounds: as well as being unable to edit, a Viewer has no access to chat at all and cannot see a job's Timeline.

It suits an auditor, a client-side observer, or someone who needs visibility without involvement. For anyone who has to answer a question in a thread, it is the wrong role.

When something is not available to you

PortzApp mostly leaves the control on screen and disables it, with a short explanation of who to ask, rather than hiding it.

That is why a greyed-out button with a tooltip is the usual signal that a role is the reason, not a bug. A missing tab, by contrast, generally means the role does not have that area at all.