Standard Permissions
Core Permission System
Role-based access control with granular permissions
The Enerlites Portal uses a role-based permission system that controls access to different features and functions. Each permission grants specific capabilities and access levels throughout the portal.
Core Permission Types
hasManagementAccess
Description: Full management access to all administrative features
Access Level: Highest level administrative permission
Grants Access To:
- Team Management tab (complete access)
- Attendance Tracking tab
- PTO Tracking tab
- Training Administration tab
- User creation and management
- All import/export functions
- System configuration options
canEditCreateUsers
Description: User management and attendance tracking permissions
Access Level: HR and manager-level permission
Grants Access To:
- User creation and editing
- Attendance Tracking tab
- PTO Tracking tab
- Team assignment functions
- User import capabilities
- Basic management functions
canAccessInsuranceTracker
Description: Insurance tracking and management access
Access Level: Specialized administrative permission
Grants Access To:
- Insurance Tracking tab
- Insurance policy management
- Premium tracking
- Coverage details management
- Insurance data export
canAccessPTOTracker
Description: PTO tracking and management access
Access Level: HR and manager-level permission
Grants Access To:
- PTO Tracking tab
- PTO balance management
- PTO import functionality
- Balance history tracking
- PTO data export
canPostTraining
Description: Training module creation and management
Access Level: Training administrator permission
Grants Access To:
- Training module creation
- Training content management
- Department-specific training assignment
- Training progress monitoring
- Module duplication features
isManager
Description: Basic manager permissions for approval workflows
Access Level: Supervisory permission
Grants Access To:
- Request approval capabilities
- Team oversight functions
- Basic reporting features
- Employee request processing
Permission Hierarchy
Understanding Permission Levels
Permission Best Practices
Principle of Least Privilege
- Grant minimum permissions necessary for job function
- Regularly review and audit assigned permissions
- Remove unnecessary permissions promptly
- Use role-based assignments for consistency
Security Considerations
- Document all permission changes
- Implement separation of duties
- Monitor for unauthorized access attempts
- Regular permission validation and updates