User Role Permissions and Access Levels
The LION Report Tool implements a comprehensive role-based access control system to ensure proper security and data access.
Available Roles
- Employee: Basic user who can create journal entries and submit reports
- Manager: Can view reports from their team members and manage external contacts
- Admin: Can manage users within the company and adjust company settings
- Owner: Has full control over company settings, billing, and user management
- SuperAdmin: System-wide administrator with access to all companies (platform administrators only)
Permission Matrix
| Feature | Employee | Manager | Admin | Owner | SuperAdmin |
|---|---|---|---|---|---|
| Create journal entries | Yes | Yes | Yes | Yes | No* |
| Submit reports | Yes | Yes | Yes | Yes | No* |
| View team reports | No | Yes | Yes | Yes | Yes |
| Manage users | No | No | Yes | Yes | Yes |
| Manage billing | No | No | No | Yes | Yes |
| System configuration | No | No | No | No | Yes |
* SuperAdmins can use the masquerade feature to temporarily act as a user with these permissions
Employee Permissions
As an Employee, you can:
- Create and manage your journal entries
- Generate and submit weekly reports
- View your report history
- Manage your profile information
- Add external contacts for your reports
Manager Permissions
In addition to Employee permissions, Managers can:
- View reports from their direct reports
- Access team analytics and dashboards
- Configure report routing for their team
- View training logs for team members
- Add external contacts for the team
Admin Permissions
In addition to Manager permissions, Admins can:
- Add, edit, and deactivate users
- Manage user roles and reporting relationships
- Configure company settings
- Access company-wide analytics
Owner Permissions
In addition to Admin permissions, Owners can:
- Manage billing and subscription details
- View and download invoices
- Add or remove user seats
- Change subscription plans
- Configure API access and authentication
SuperAdmin Permissions
SuperAdmins have platform-wide access and can:
- Manage all companies in the system
- View and modify system-wide configurations
- Use the masquerade feature to act as any user
- Access system logs and analytics
- Manage system-wide integrations and API keys