Access and roles
Workspace roles and permissions
Every workspace has one owner, may have administrators, and has employees. A person with administrator rights still uses the personal Planner and Attendance & Leave areas.
| Action | Employee | Administrator | Owner |
|---|---|---|---|
| Own tasks, assigned actions, attendance, leave, draft estimate | Yes | Yes | Yes |
| Manage ordinary employees and team tasks | No | Yes | Yes |
| Review team attendance, leave, payroll inputs, finance operations, reports, and audit | No | Yes | Yes |
| Configure shifts, sites, email, and workspace branding | No | Yes | Yes |
| Create or manage administrator accounts; transfer ownership | No | No | Yes |
| Create attendance and leave policy versions | No | No | Yes |
| Change finance settings or create finance accounts | No | No | Yes |
| View subscription billing and start checkout | No | No | Yes |
The system also enforces permissions on the server. Seeing a guide does not grant access to its action. If a control is absent or access is denied, confirm your workspace and role before asking the owner to help.
Triovative’s platform operator uses a separate Platform Control account for customer onboarding and subscription operations. That account does not provide access to your workspace tasks, attendance, leave, finance, files, or audit history.