Understanding Roles and Permissions
What admin and user roles can do, and how tenant and customer scoping protect records.
Required permissions: Applies to everyone, this article explains permissions themselves.
NDT Pilot controls access at three levels: your role, your organization (tenant), and, for customer accounts, your customer record.
Before you begin
- Know which account type you have: staff (admin or user role) or customer contact.
Step-by-step instructions
- 1
Role
Admin-role accounts can invite users, assign roles, change settings, and manage the tenant. User-role accounts work with business records but cannot administer the platform.
- 2
Tenant scope
Every business record belongs to your organization's tenant. Users see their own organization's records, never another company's.
- 3
Customer scope
Customer accounts are linked to exactly one customer record. They see their own requests, approved and delivered reports, assets, and permitted invoices, never drafts, internal review information, or other customers' data.
Expected result
You know what you can see and do, and why.
What happens next
If a record is missing, check whether it is a permissions question using 'Why can't I see my records?'.
Fields explained
- Admin role
- Platform administrator, can manage users, settings, and tenant configuration.
- User role
- Standard account, works with records within the tenant scope.
Important
- Administrators cannot weaken tenant or customer scoping, it applies to every account, including theirs.
Related questions
Related guides
Related module
Configuration and Settings module pageWas this guide helpful?
Contact support