Skip to main content
Permission Management

Not roles — computed permissions

In kommuns you never give anyone a fixed role. You assign a person, a team or a partner somewhere in the inventory with a permission definition; the real permission on each inventory is computed at that moment from these assignments. We call it the dynamic permission model.

Try it free
Few definitions, many situationsReuse a few definitions like Technician or Location Manager in every building — no explosion of roles.
Permission where the work isAssign someone to a new building and their permission exists there at once; remove it and it is gone.
Responsibility becomes permission"Inventory Manager" permissions work only on the equipment the person is responsible for.
Limited access for partnersA service company sees only the system you allow, and passes it to its team only within its own limits.

How it differs from a classic role model​

Classic role modelkommuns: dynamic permission model
What does a person get?One role (e.g. Technician)Assignments on the inventory (e.g. Technician at the Boston hotel, manager of Electrical)
Where does it apply?The same everywhereComputed separately for each inventory
A new building, a new partnerInvent a new roleMake a new assignment
When the assignment is removedUpdate the role by handThe permission goes away by itself

In a role model, a technician who works in one building only, or a contractor who may reach only the HVAC system, needs new roles. In kommuns what can be done (the permission definition) is separate from where (the assignment), and the assignments live in the inventory tree.

How is it computed?​

A colleague assigned with the same Technician definition can delete only on the systems they manage. One definition gives everyone their own area.

Teams and partners in the same model​

  • Teams: assign a team on the inventory; the team captain uses the team's permission, members work on the work orders assigned to the team. A new member sees the team's work at once.
  • Expert companies: the owner assigns a company only on the systems concerned. The company admin passes it on to employees in full, limited by their own company permission or limited by a chosen permission; no employee can use more than the company was given.
  • Consultant: a switch on the assignment. The same company can do the work on one system and review it on another.
The Assign window
Assign: who, with which permission definition; the inventory manager and consultant switches.

Control for administrators​

  • Three-state permissions: Yes, No or Inventory Manager for each permission.
  • Default definitions: Organization Admin / Employee, Location Manager / Employee, Team Captain / Member; add your own.
  • Safe by default: a new employee sees no inventory until assigned on a location.
  • Audit trail: who did what on which inventory, in the Log Records.

Read more: The dynamic permission model and How your permission is computed.

Ready to try it?Create your organization in a few minutes and use every feature with the trial plan.
Create an accountStep by step in the guide

Other features

Inventory ManagementLocations, systems, equipment and sub-equipment in one tree; with categories, brands and models, files and tags.Work Order ManagementOpen, assign and forward work orders; follow them end to end with forms, photos, comments and time records.Planned MaintenancePut periodic maintenance on a schedule with recurring work order rules and see it on a calendar ahead of time.Forms and InspectionsVersioned checklists, consultant approval and answer statistics: maintenance quality you can measure.Working with PartnersYour service and inspection companies work with their own accounts, only on the inventory you allow.