Permission Matrix

This is the complete reference for all permissions in Taskr. Use this matrix to understand exactly what each role can and cannot do.

Legend

Symbol	Meaning
✅	Allowed
❌	Not allowed
—	Not applicable

Matrix Overview

Permissions are organized into:

Resources: The types of data or features (e.g., customers, jobs, invoices)
Actions: What can be done with each resource (e.g., create, view, update, delete)
Roles: Who has permission (Owner, Admin, Manager, Member)

Organization Management

Organization

Controls over the organization itself.

Action	Owner	Admin	Manager	Member
`update` - Modify organization settings	✅	✅	❌	❌
`delete` - Delete the organization	✅	❌	❌	❌
`transfer-ownership` - Transfer to another user	✅	❌	❌	❌
`manage-billing` - Manage subscription & payments	✅	✅	❌	❌

Team

Managing teams within the organization.

Action	Owner	Admin	Manager	Member
`create` - Create new teams	✅	✅	❌	❌
`view` - View teams and members	✅	✅	✅	✅
`update` - Modify team settings	✅	✅	✅	❌
`delete` - Delete teams	✅	✅	❌	❌

Member

Managing organization members.

Action	Owner	Admin	Manager	Member
`invite` - Invite new members	✅	✅	✅	❌
`view` - View member information	✅	✅	✅	✅
`update-role` - Change member roles	✅	✅	❌	❌
`remove` - Remove members	✅	✅	✅	❌

Invitation

Managing pending invitations.

Action	Owner	Admin	Manager	Member
`create` - Send invitations	✅	✅	✅	❌
`cancel` - Cancel pending invitations	✅	✅	✅	❌
`resend` - Resend invitation emails	✅	✅	✅	❌

Access Control (AC)

Managing custom access control rules.

Action	Owner	Admin	Manager	Member
`create` - Create access rules	✅	✅	❌	❌
`update` - Modify access rules	✅	✅	❌	❌
`delete` - Delete access rules	✅	✅	❌	❌

Business Operations

Customer

Customer records and relationships.

Action	Owner	Admin	Manager	Member
`create` - Add new customers	✅	✅	✅	✅
`view` - View customer details	✅	✅	✅	✅
`update` - Edit customer information	✅	✅	✅	✅
`delete` - Delete customers	✅	✅	✅	❌
`export` - Export customer data	✅	✅	✅	❌

Job

Jobs, work orders, and service requests.

Action	Owner	Admin	Manager	Member
`create` - Create new jobs	✅	✅	✅	✅
`view` - View job details	✅	✅	✅	✅
`update` - Edit job information	✅	✅	✅	✅
`delete` - Delete jobs	✅	✅	✅	❌
`assign` - Assign jobs to team members	✅	✅	✅	❌
`complete` - Mark jobs as complete	✅	✅	✅	✅

Asset

Equipment, property, and asset records.

Action	Owner	Admin	Manager	Member
`create` - Add new assets	✅	✅	✅	❌
`view` - View asset details	✅	✅	✅	✅
`update` - Edit asset information	✅	✅	✅	❌
`delete` - Delete assets	✅	✅	✅	❌
`assign` - Assign assets to locations/jobs	✅	✅	✅	❌

Financial

Invoice

Customer invoices and billing.

Action	Owner	Admin	Manager	Member
`create` - Create new invoices	✅	✅	✅	❌
`view` - View invoice details	✅	✅	✅	✅
`update` - Edit invoices	✅	✅	✅	❌
`delete` - Delete invoices	✅	✅	✅	❌
`send` - Send invoices to customers	✅	✅	✅	❌
`void` - Void/cancel invoices	✅	✅	✅	❌

Quote

Estimates and quotations.

Action	Owner	Admin	Manager	Member
`create` - Create new quotes	✅	✅	✅	✅
`view` - View quote details	✅	✅	✅	✅
`update` - Edit quotes	✅	✅	✅	✅
`delete` - Delete quotes	✅	✅	✅	❌
`send` - Send quotes to customers	✅	✅	✅	❌
`convert` - Convert quote to job/invoice	✅	✅	✅	❌

Transaction

Financial transactions and reconciliation.

Action	Owner	Admin	Manager	Member
`create` - Record new transactions	✅	✅	✅	❌
`view` - View transaction details	✅	✅	✅	✅
`update` - Edit transactions	✅	✅	✅	❌
`delete` - Delete transactions	✅	✅	✅	❌
`reconcile` - Reconcile with bank	✅	✅	✅	❌

System

Document

Document storage and management.

Action	Owner	Admin	Manager	Member
`create` - Upload documents	✅	✅	✅	✅
`view` - View/download documents	✅	✅	✅	✅
`update` - Edit document metadata	✅	✅	✅	✅
`delete` - Delete documents	✅	✅	✅	❌
`share` - Share documents externally	✅	✅	✅	❌

Report

Reporting and analytics.

Action	Owner	Admin	Manager	Member
`view` - View reports	✅	✅	✅	✅
`export` - Export report data	✅	✅	✅	❌
`schedule` - Schedule automated reports	✅	✅	❌	❌

Settings

System and user settings.

Action	Owner	Admin	Manager	Member
`view` - View settings	✅	✅	✅	✅
`update` - Modify settings	✅	✅	❌	❌

Summary by Role

Owner Permissions

Owners have all permissions on all resources. No restrictions.

Admin Permissions

Admins have all permissions except:

❌ organization.delete
❌ organization.transfer-ownership

Manager Permissions

Managers have business operations permissions but cannot:

❌ Modify organization settings
❌ Manage billing
❌ Create or delete teams
❌ Change member roles
❌ Manage access control rules
❌ Schedule reports
❌ Update system settings

Member Permissions

Members have limited permissions: Can do:

✅ View all data
✅ Create customers, jobs, quotes, documents
✅ Update customers, jobs, quotes, documents
✅ Complete jobs
✅ View reports
✅ View settings

Cannot do:

❌ Delete any records
❌ Export data
❌ Assign work
❌ Send invoices or quotes
❌ Void invoices
❌ Reconcile transactions
❌ Share documents
❌ Invite or remove members
❌ Any administrative actions

Quick Reference Cards

”Can this role delete records?”

Resource	Owner	Admin	Manager	Member
Organization	✅	❌	❌	❌
Teams	✅	✅	❌	❌
Customers	✅	✅	✅	❌
Jobs	✅	✅	✅	❌
Assets	✅	✅	✅	❌
Invoices	✅	✅	✅	❌
Quotes	✅	✅	✅	❌
Transactions	✅	✅	✅	❌
Documents	✅	✅	✅	❌

“Can this role export data?”

Resource	Owner	Admin	Manager	Member
Customers	✅	✅	✅	❌
Reports	✅	✅	✅	❌

“Can this role manage people?”

Action	Owner	Admin	Manager	Member
Invite members	✅	✅	✅	❌
Remove members	✅	✅	✅	❌
Change roles	✅	✅	❌	❌
Assign work	✅	✅	✅	❌

← Role Definitions | Back to Permissions Overview | Common Scenarios →

​Permission Matrix

​Legend

​Matrix Overview

​Organization Management

​Organization

​Team

​Member

​Invitation

​Access Control (AC)

​Business Operations

​Customer

​Job

​Asset

​Financial

​Invoice

​Quote

​Transaction

​System

​Document

​Report

​Settings

​Summary by Role

​Owner Permissions

​Admin Permissions

​Manager Permissions

​Member Permissions

​Quick Reference Cards

​”Can this role delete records?”

​“Can this role export data?”

​“Can this role manage people?”