New Custom Role
Draft · v1Kutchina IN·Cloned from Service Manager·Created by Amit Shah · just now·unsaved
Role Details
snake_case · unique within tenant · immutable after publish
Starting grants pre-selected below · modify as needed
MFA Mandatory
TOTP required for all assigned users
Time-bound Elevation
Auto-expires after 90 days · PAM pattern
Permission Picker
23 of 847 selectedM02
Ticketing & Incident Management
8 granted · 218 total
TKT
ticket:create
Create tickets · assigned service centres only
ALL
TKT
ticket:read
Read ticket details · scoped to assigned SCs
TEAM
TKT
ticket:update
Modify ticket fields · status, priority, notes
ASSIGNED
TKT
ticket:reassign
Reassign tickets to other techs in SC
TEAM
TKT
ticket:cancel:approve
Approve cancellation requests
DENIED
M03
Work Orders
7 granted · 142 total
WO
work_order:create
Create work orders from tickets or standalone
ALL
WO
work_order:read:assigned
Read WOs assigned to current user
ASSIGNED
WO
work_order:update:assigned
Update status, add notes, attach photos
ASSIGNED
WO
work_order:close
Submit job-done with evidence + signature
ASSIGNED
WO
work_order:approve:junior
Approve jobs submitted by junior techs in SC
TEAM
M04
Customer & Asset CMDB
4 granted · 184 total
CMD
asset:read
View customer assets · serial, warranty, history
ALL
CMD
asset:update
Update asset status · in-service, returned, decommissioned
ASSIGNED
CMD
asset:transfer
Move assets between customers / locations
DENIED
M08
Spare Parts & Inventory
3 granted · 96 total
INV
spare:read
View spare parts catalog and stock at SC
ALL
INV
spare:consume:assigned
Record part consumption on assigned WOs
ASSIGNED
INV
spare:request
Raise indents for parts from central warehouse
TEAM
M11
Invoicing & Payments
1 granted · 112 total
INV
invoice:read:assigned
View invoices linked to assigned WOs
ASSIGNED
INV
invoice:generate
Create invoices for completed work
DENIED
INV
payment:refund
Issue refunds or credit notes
DENIED
M14
Omni-channel Communications
0 granted · 84 total
COM
comms:send:sms
Send SMS to customers (DLT registered templates)
DENIED
COM
comms:send:whatsapp
Send WhatsApp messages
DENIED
M19
Workforce & Partners
0 granted · 78 total
WF
workforce:read:team
View SC team roster + utilization
DENIED
23 / 847 permissions granted · 5 modules touched · pending review
ST
Senior Technician
Customsenior_technician · v1
23
Permissions granted
0
Users assigned
3 SC
Scope
90d
Review cycle
Sample User Perspective
RMRavi Menon (Field Tech L2 · 4 years tenure · SC-MUM-01)
✓View + update tickets assigned to him
✓Create WOs from incoming tickets
✓Approve jobs submitted by junior techs in Mumbai SC
✓Consume parts against assigned WOs
✕Cannot approve ticket cancellations (HOD scope)
✕Cannot generate or void invoices (Finance scope)
✕Cannot send customer SMS (comms scope, DLT)
Effective Permissions
grantedticket:create
M02 · all scope
ticket:read
M02 · team scope
ticket:update
M02 · assigned
ticket:reassign
M02 · team
work_order:create
M03 · all
work_order:read:assigned
M03
work_order:update:assigned
M03
work_order:close
M03 · assigned
work_order:approve:junior
M03 · team
asset:read
M04 · all
asset:update
M04 · assigned
spare:read
M08 · all
spare:consume:assigned
M08
spare:request
M08 · team
invoice:read:assigned
M11
+ 8 more from baseline cloneView
Effective: 23 granted, 824 denied · Kutchina IN