Roles & Permissions Matrix
Permission Catalog · 7 System RolesCatalog·Showing 32 of 847 permissions·Kutchina Home Appliances (IN)·25 Jun 2026 · 15:42 IST
Tenant:
Modules:5 selected
✓Granted · all-scope
◐Granted · team-scope
●Granted · own-scope
—Denied / not granted
Override on this cell
Showing 32 / 847 permissions
| Permission | SA System Adminplatform · all tenants | TA Tenant Adminsingle tenant · all | SM Service Managerteams / queues | AG Agentassigned / own | EU End Userportal · own only | AU Auditorread-only | BM Billing Mgrfinancial only | + |
|---|---|---|---|---|---|---|---|---|
| M02TICKETING & INCIDENT MANAGEMENT11 permissions shown · 218 total | ||||||||
| ticket:createall | ✓ | ✓ | ✓ | ● | ● | — | — | |
| ticket:readall | ✓ | ✓ | ✓ | ◐ | ● | ✓ | — | |
| ticket:readteam | ✓ | ✓ | ◐ | ◐ | ● | ✓ | — | |
| ticket:updateall | ✓ | ✓ | ✓ | — | — | — | — | |
| ticket:updateassigned | ✓ | ✓ | ✓ | ◐ | ● | — | — | |
| ticket:reassignall | ✓ | ✓ | ✓ | — | — | — | — | |
| ticket:cancelapprove | ✓ | ✓ | ✓ | ◐ | — | — | — | |
| ticket:exportall | ✓ | ✓ | ◐ | — | — | ✓ | ✓ | |
| ticket:deleteall | ✓ | — | — | — | — | — | — | |
| M03WORK ORDERS7 permissions shown · 142 total | ||||||||
| work_order:createall | ✓ | ✓ | ✓ | ◐ | — | — | — | |
| work_order:readassigned | ✓ | ✓ | ◐ | ◐ | ● | ✓ | — | |
| work_order:updateassigned | ✓ | ✓ | ◐ | ◐ | — | — | — | |
| work_order:closeassigned | ✓ | ✓ | ✓ | ◐ | — | — | — | |
| work_order:approveestimate | ✓ | ✓ | ✓ | — | — | — | ✓ | |
| work_order:assigntech | ✓ | ✓ | ✓ | — | — | — | — | |
| M04CUSTOMER & ASSET CMDB5 permissions shown · 184 total | ||||||||
| asset:createall | ✓ | ✓ | ◐ | — | — | — | — | |
| asset:readall | ✓ | ✓ | ✓ | ◐ | ● | ✓ | — | |
| asset:updateall | ✓ | ✓ | ◐ | — | — | — | — | |
| asset:transferall | ✓ | ✓ | — | — | — | — | — | |
| asset:decommissionall | ✓ | ✓ | — | — | — | — | — | |
| M06SLA & TAT4 permissions shown · 67 total | ||||||||
| sla:policy:editall | ✓ | ✓ | ✓ | — | — | — | — | |
| sla:readall | ✓ | ✓ | ✓ | ◐ | ● | ✓ | — | |
| sla:overridepause | ✓ | ✓ | ✓ | ◐ | — | — | — | |
| sla:overrideextend | ✓ | ✓ | ◐ | — | — | — | — | |
| M11INVOICING & PAYMENTS6 permissions shown · 112 total | ||||||||
| invoice:generateall | ✓ | ✓ | — | — | — | — | ✓ | |
| invoice:readall | ✓ | ✓ | — | — | ● | ✓ | ✓ | |
| invoice:approveall | ✓ | ✓ | — | — | — | — | ✓ | |
| invoice:voidall | ✓ | ✓ | — | — | — | — | ✓ | |
| payment:reconcileall | ✓ | ✓ | — | — | — | — | ✓ | |
| payment:refundall | ✓ | ✓ | — | — | — | — | ✓ | |
847Total permissions in catalog
7System roles (locked)
142Custom roles (active)
2,847User-level permission overrides
Permission Detail
Selected: ticket:read · team scope
ticket:readteam
Module: M02 Ticketing & Incident Management
Resource: ticket
Action: read
Scope: team · user can read tickets belonging to teams they manage
Evaluation: RLS-scoped via user_tenant_memberships.team_id FK
Granted since: kernel v1.0 · 2026-03-16
Role Grants
✓
System Adminall✓
Tenant Adminall◐
Service Managerteam◐
Agentteam●
End Userown✓
Auditorall—
Billing MgrdenyPermission Overrides · 4 active
3 users granted explicit access · 1 user denied in Kutchina-IN
Last modified: 18 Apr 2026 by Subhash Roy · hash chained audit