User Permissions

Need to add permissions to some of your administrators? The Client Portal, Onsite Track Easy, its related Supplier Portals and the Mobile App can all share the same login. In order to manage the number of users at your Site or Realm, the Onsite Track Easy system allows for permissions and restrictions on what a user account can do.
This section covers the most common permissions granted to our two main user types. Realm Users and Site Users.
NOTE: When adding permissions, or requesting them, ensure you are familiar with the impact it might have on the administrator now being able to see confidential information, (private data/sensitive data), being able to add roles, competencies or enrol someone into training for example. All of these extra permissions can have an unintended effect. If unsure, please reach out to your Avetta Account or Client Success Manager.

Here are two videos to help Administrators see the process of Managing a New User at a Site or Realm. Managing Realm User Accounts covers the initial process of creating a new user at the realm level and showing relevant permissions. It details the user permissions and what each will do and how a Workforce Management account is triggered and its activation.

Managing Site User Accounts covers the additioanl site based permissions that correspond when a worker is given permissions at one or more sites withing a realm. It also covers the different permissions that can be enabled for site specific functions.

Managing Realm User Permissions for Client Admins

Video showing how to Create Realm Users and manage permissions.
Also shows how a Workforce Management Account is triggered for that new Realm/Site user.

Managing Site User Permissions for Client Admins

Video showing how Site Users permissions are added to a worker

Additionally there are four user guides that explain more about the individual permissions, access levels and definitions of terms.

User Guide - Modifying User Access Rights and Inactivating.pdf

User Guide - Creating Realm User Accounts.pdf

Realm User Permission (Definitions).pdf

Site User Permission (Definitions).pdf

Creating User Accounts

The below tables shows standard permissions for various user accounts.

	Version 3 Only (Client Portal Integtation)
	Version 2 & 3
	Version 2 Only (No Client Portal Integration)

- Optional Configuration Setting

NOTE: * Optional configuration for the ability "Can Log Persons In and Out" requires that the site/realm has that feature enabled in the database. Enabling this will allow ANY mobile app user with "Can Log Persons In and Out", to modify workers login. Only enable if specifically required.

REALM ACCOUNTS

User Type	Super User	Standard Administrator
Can Use Onsite
Realm Access Level: Data Viewer / Data Editor	Data Editor	Data Editor
Can View Foreign Data From: Own Employer / All Employers	All Employers	All Employers
Can Represent Concos in Own Portals:
Can Represent Employers: Own Employer / All Employers	All Employers	All Employers
Analytics Report Role: Manager / Supervisor / User
Can View SMS Review Results:
Can Manage User Accounts:
Can Access Financial Reports: * Not Currently Used
Can Block Cardholders:
Can Create Certs:
Can Assign Certs:
Can Authorise Assigned Certs:
Can Create Realm Roles:
Can Assign Realm Roles:
Can Create Competencies:
Can Approve Site Competencies:
Can Assign Competencies:
Can End Employment:
Can Print Cards:
Can Edit Realm Settings:
Can Edit Admin Notes:
Can Download Files:
Can Upload Files:
Can Access Private Data:
Can Access Sensitive Data
Can Edit Incomplete Actions:
Can Process Escalated Actions:
Can Create Corrective Actions:
Can Process Corrective Actions:
Can Action Corrective Actions:
Can View Corrective Actions:
Can Process Pending Data:
Can Endorse Pending Assessments: * Not Currently Used
Can Process Pending SMS Reviews: * Not Currently Used
Can Manage Classroom Training:
Can Manage Online Training:
Can Manage Assessments:
Can Manage Merge Templates:
Can Perform Id Checks: * Not Currently Used
Can Perform Global Search: *issued by Pegasus account managers only
Can Manage Social Security Number


Mobile App Rights
Can Use Mobile App
Can Perform Cardholder Role Audits
Can search by Cardholder Name, Company and DOB
Can Manage Emergency Events
Can Send SMS for Emergency Events
Broadcasting Rights
Can View All Broadcasts
Can Send Email Broadcasts
Can Send SMS Broadcasts
Other Rights
Can Make Online Bookings
Can Process Online User Requests

SITE ACCOUNTS

User Type	Mobile App User	Supervisor	Super User	Full Administrator
Site:	As Required	As Required	As Required	As Required
Can Use Onsite
Data Access Level: Data Viewer / Data Editor	Data Viewer	Data Editor	Data Editor	Data Editor
Can View Foreign Data From: Own Employer / All Employers	No Employers	All Employers	All Employers	All Employers
Can Represent Employers: Own Employer / All Employers	No Employers	All Employers	All Employers	All Employers
Analytics Report Role: Manager / Supervisor / User
Can View SMS Review Results
Can Manage User Accounts
Can Access Financial Reports: * Not Currently Used
Can Block Cardholders
Can Log Persons In And Out* Requires Editor Access
Can Create Logpoint Messages
Can Edit All Logpoint Messages
Can Create Certs
Can Assign Certs
Can Authorise Assigned Certs
Can Create Cert Keys
Can Assign Cert Keys
Can Create Roles
Can Assign Roles
Can Create Competencies
Can Assign Competencies
Can Create Access Keys
Can Assign Access Keys
Can Associate Contractors
Can Associate Employees
Can End Employment
Can Print Cards
Can Manage Safety Selections
Can View Breathalyser Reports
Can Edit Site Settings
Can Manage Site Alerts
Can Configure Logpoints
Can Edit Admin Notes
Can Download Files
Can Upload Files
Can Access Private Data
Can Access Sensitive Data
Can Edit Incomplete Actions * Not Currently Used
Can Process Escalated Actions * Not Currently Used
Can Action Corrective Actions * Not Currently Used
Can View Corrective Actions * Not Currently Used
Can Process Pending Data
Can Process Pending SMS Reviews * Not Currently Used
Can Endorse Pending Assessments
Can Manage Crews
Can Manage Classroom Training
Can Manage Online Training
Can Manage Assessments
Can Manage Merge Templates
Can Perform Id Checks: * Not Currently Used
Can Perform Global Search: *issued by Pegasus Account Managers only
Can Login/Logout Assets
Can Approve Assets
Can Manage Social Security Number
Mobile App Rights
Can Use Mobile App
Can Perform Cardholder Role Audits
Can search by Cardholder Name, Company and DOB
Can Mange Emergency Events
Can Send SMS For Emergency Events
Can Manage Assets
Broadcasting Rights
Can View All Broadcasts
Can Send Email Broadcasts
Can Send SMS Broadcasts
Other Rights
Can Make Online Bookings
CAn Process Online User Requests