Roles & permissions
Roles control who can see and do what in Momentumpro. Permissions are fine-grained — over 200 of them across the platform — and bundled into roles for ease of use.
Default roles
Every new tenant ships with these roles:
| Role | Typical user | Sees |
|---|---|---|
| Owner | Founder / CEO | Everything, including billing |
| Admin | IT / Operations Lead | Everything except billing |
| HR Manager | Head of People | All HR, payroll, hiring |
| Manager | Department lead | Their team's data |
| Employee | Staff | Their own data + portal |
| Finance | Accountant | Invoices, payslips, payroll, expenses |
| Procurement | Buyer | Vendors, POs, requisitions, tenders |
| Safety Officer | HSE | Incidents, visitors, evacuation |
You can use these as-is, modify them, or build your own.
Editing a role
- Admin → Roles → [Role].
- The permissions list is grouped by module — Employees, Attendance, Documents, etc.
- Tick / untick individual permissions.
- Save.
Users with that role get the changes on their next page load.
Creating a custom role
- Admin → Roles → New role.
- Name it (e.g. "Branch Manager — Tel Aviv").
- Either:
- Start from blank — tick only what you need.
- Copy from existing — duplicate "Manager" and tweak.
- Save.
Assigning roles
A user can have multiple roles — permissions are the union (most permissive wins).
- Open the user.
- Roles & permissions tab.
- Tick the roles to assign.
- Save.
For bulk:
- Admin → Users → Bulk action → Assign role.
Permission scope
Some permissions are scoped:
view_employees— sees all employees.view_employees:own_department— sees only their department.view_employees:direct_reports— sees only their direct reports.
When you tick view_employees, you can pick the scope on the right.
Auditing
Who did what when:
- Admin → Activity Log shows every permission change.
- Admin → Roles → [Role] → History shows the history of that specific role.
Best practice
- Don't assign Admin liberally. It's a god role.
- Use department-scoped roles for managers — they shouldn't see other departments by default.
- Review roles quarterly — people's responsibilities drift.