Start here

Permission reference

Every permission in Hubtoll, grouped by area, with the exact actions each one unlocks — down to the smallest task. Use it to decide precisely what to grant each colleague.

How to read this

A permission is a single capability you assign to a person (or bundle into a role). This page lists every permission Hubtoll has, grouped by area, and spells out the concrete actions each one unlocks.

A few patterns make the whole list easy to scan:

Pattern	What it means
Editor	Create, update and delete within that area. An editor always includes the matching read-only view.
Read-only	See that area company-wide, change nothing.
Initiator	Start or submit something (raise a request, log an expense, issue a document).
Workflow editor / read-only	Configure — or just view — that area's approval workflow.
Sub-scopes	Some areas split the editor into narrower pieces (e.g. staff, departments, office locations). The area's top-level Editor includes all of them.

info

Approving is an assignment, not a permission. You won't find an "approver" permission here. Approval workflows route each step to specific people; whoever a step is routed to can act on it — no module permission required. See approval workflows.

bolt

Self-service needs no permission. Applying for leave, filling a timesheet, taking a course, viewing your own record, or acting on an approval routed to you all work for any licensed member — the permissions below are for administering each area.

Licence & access gates

These aren't permissions you assign — they're automatic checks Hubtoll applies underneath every permission. They're listed so the full access picture is clear.

Gate	What it checks
CORPORATE_VERIFICATION	Not an assignable permission — a built-in check that you belong to the company you're acting in. Every self-service action (applying for leave, submitting a timesheet, acting on an approval routed to you) requires it and nothing more.
HRM_LICENSED	Not assignable — an active Human Resources licence seat. Any change (create/edit/delete) in an HR module requires a live HR licence in addition to the relevant permission below.
EDMS_LICENSED	Not assignable — an active Document Management licence. Required to reach any document, folder or sharing action.
EDMS_EXPIRED_ALLOWED	Not assignable — marks the view-and-delete actions that stay reachable during the Document Management expired-grace window.

Company-wide roles

Broad roles that cut across every module. The first three cascade: holding one satisfies the matching kind of permission everywhere, so you rarely need to grant them alongside module permissions.

Permission	What it grants
SUPER_ADMIN Super admin	Full, unrestricted access to everything in the company. Passes every permission check in every module Create, edit, delete, approve and configure anywhere Implicitly holds every permission listed on this page
HOST_ADMIN Host admin	Hubtoll platform-operator role — full access across every company. Everything Super admin can do, spanning all companies on the platform Reserved for the Hubtoll operator, not customer staff
CORPORATE_READONLY Company read-only	See everything company-wide, change nothing. Satisfies any “read/view” permission in every module View all lists, records, reports and dashboards Cannot create, edit, delete or approve
CORPORATE_INITIATOR Company initiator	Start (initiate) any process in any module. Satisfies any “initiator” permission in every module Add staff, raise a budget request, log an expense, assign an asset Issue and send finance documents and record payments

Support

Contact the Hubtoll team and track your support tickets. These are top-level permissions. “Company read-only” (CORPORATE_READONLY) cascades to the read permission, and Super admin / Host admin see everything.

Permission	What it grants
SUPPORT_TICKET_ADMIN Support – admin	Raise support tickets with Hubtoll, reply, and manage the company's support conversations. Open a new support ticket — pick a category, describe the issue and attach screenshots Reply to Hubtoll's responses See all of the company's support tickets and their status
SUPPORT_TICKET_READONLY Support – read-only	View the company's support tickets and their status. Cannot raise tickets or reply. See the company's support tickets and their status Cannot raise a ticket or reply

Corporate management settings

Company profile, working week, timezone and public holidays.

Permission	What it grants
CORPORATE_MANAGEMENT_EDITOR Corporate settings – editor	Full access to all corporate management settings. Everything in the profile and holiday editors below
CORPORATE_MANAGEMENT_READONLY Corporate settings – read-only	View all corporate management settings. View profile, working-week and holiday settings
CORPORATE_MANAGEMENT_PROFILE_EDITOR Company profile – editor	Edit the company profile. Update the company profile Set the working week (weekend days) Set the company timezone
CORPORATE_MANAGEMENT_PROFILE_READONLY Company profile – read-only	View the company profile settings. View profile, working-week and timezone settings
CORPORATE_MANAGEMENT_HOLIDAY_EDITOR Public holidays – editor	Manage the public-holiday calendar. Add a public holiday Enable or disable a holiday Delete a holiday
CORPORATE_MANAGEMENT_HOLIDAY_READONLY Public holidays – read-only	View the public-holiday calendar. View the holiday list

API integration

Machine access to your company's data: credentials another system exchanges for a short-lived token to call the public API. A credential is a standing key that works outside any login session, so issuing one is deliberately its own privileged grant — not implied by general settings access. Super admin sees and manages everything as usual.

Permission	What it grants
API_INTEGRATION_EDITOR API integration – editor	Create, rotate and revoke the API credentials that let your own systems call Hubtoll. Create a credential — name it, choose its scopes, and copy the secret (shown exactly once; only a hash is stored) Issue a new secret for a credential — the old one stops working immediately Revoke a credential — it and any token already issued from it stop working on the next call Everything the read-only permission below can see
API_INTEGRATION_READONLY API integration – read-only	See which credentials exist, what each may access and when it was last used — an audit view. See the company's API credentials, their scopes, status and last-used time Cannot create, rotate or revoke a credential Secrets are never shown to anyone — not even the editor, after creation

Permission

What it grants

API_INTEGRATION_EDITOR
API integration – editor

Create, rotate and revoke the API credentials that let your own systems call Hubtoll.

Create a credential — name it, choose its scopes, and copy the secret (shown exactly once; only a hash is stored)
Issue a new secret for a credential — the old one stops working immediately
Revoke a credential — it and any token already issued from it stop working on the next call
Everything the read-only permission below can see

API_INTEGRATION_READONLY
API integration – read-only

See which credentials exist, what each may access and when it was last used — an audit view.

See the company's API credentials, their scopes, status and last-used time
Cannot create, rotate or revoke a credential
Secrets are never shown to anyone — not even the editor, after creation

Subscription & licensing

Buying products, seats and the people who use them.

Permission	What it grants
SUBSCRIPTION_MANAGEMENT_EDITOR Subscriptions – editor	Buy and renew product subscriptions. Subscribe to a product Renew a subscription Everything in “Users & seats – editor” below
SUBSCRIPTION_MANAGEMENT_READONLY Subscriptions – read-only	View subscriptions. View the subscription dashboard and history
SUBSCRIPTION_USERS_EDITOR Users & seats – editor	Manage the people in the company and their access. Add a company user Edit a user’s identity Assign permissions to a user Add users to a licence Revoke a user’s licence seat
SUBSCRIPTION_USERS_READONLY Users & seats – read-only	View company users. View the list of company users and their seats

Employee records

Staff records, departments and office locations. (HR licence required for changes.)

Permission	What it grants
EMPLOYEE_MANAGEMENT_EDITOR Employee records – editor	Full access to employee-record management. Everything in the staff, department and office-location editors below
EMPLOYEE_MANAGEMENT_READONLY Employee records – read-only	View employee-record data. View licence usage stats and module data
EMPLOYEE_MANAGEMENT_STAFF_EDITOR Staff records – editor	Full staff-record management. Create and edit any employee record Assign leave categories, line manager and employee ID Manage staff details across the company
EMPLOYEE_MANAGEMENT_STAFF_INITIATOR Staff records – initiator	Add new staff. Create a new staff record (“Add New Employee”)
EMPLOYEE_MANAGEMENT_STAFF_READONLY Staff records – read-only	View staff records. View employee records
EMPLOYEE_MANAGEMENT_CLASSIFICATION_EDITOR Departments – editor	Manage departments and assign their members. Create a department Add a user to a department Remove a user from a department
EMPLOYEE_MANAGEMENT_CLASSIFICATION_READONLY Departments – read-only	View departments. View departments and their members
EMPLOYEE_MANAGEMENT_OFFICE_LOCATION_EDITOR Office locations – editor	Manage office locations. Create an office location Enable or disable an office location Delete an office location
EMPLOYEE_MANAGEMENT_OFFICE_LOCATION_READONLY Office locations – read-only	View office locations. View office locations
EMPLOYEE_MANAGEMENT_WORKFLOW_EDITOR Employee workflow – editor	Configure the staff-record approval workflow. Create and edit the employee-record approval workflow
EMPLOYEE_MANAGEMENT_WORKFLOW_READONLY Employee workflow – read-only	View the staff-record workflow. View the employee-record workflow configuration

Leave management

Leave types and the leave-approval workflow. Applying for leave and approving requests routed to you need no permission — any licensed member can.

Permission	What it grants
LEAVE_MANAGEMENT_EDITOR Leave – editor	Full access to leave management. Everything in the leave-settings editor below
LEAVE_MANAGEMENT_READONLY Leave – read-only	View leave configuration. View configured leave categories
LEAVE_MANAGEMENT_SETTINGS_EDITOR Leave settings – editor	Manage leave types. Create or update a leave category Enable or disable a leave category
LEAVE_MANAGEMENT_SETTINGS_READONLY Leave settings – read-only	View leave types. View the configured leave categories
LEAVE_MANAGEMENT_WORKFLOW_EDITOR Leave workflow – editor	Configure the leave-approval workflow. Create and edit the leave-approval workflow
LEAVE_MANAGEMENT_WORKFLOW_READONLY Leave workflow – read-only	View the leave workflow. View the leave-approval workflow configuration

Timesheet & projects

Projects, project teams, submission deadlines and the timesheet-approval workflow. Logging and submitting your own timesheet needs no permission.

Permission	What it grants
TIMESHEET_MANAGEMENT_EDITOR Timesheet – editor	Full access to timesheet management. Everything in the project and settings editors below
TIMESHEET_MANAGEMENT_READONLY Timesheet – read-only	View projects and timesheets. View projects and timesheet data
TIMESHEET_MANAGEMENT_PROJECT_EDITOR Projects – editor	Manage projects and teams. Create a project Enable or disable a project Add a project team member Remove a project team member
TIMESHEET_MANAGEMENT_PROJECT_READONLY Projects – read-only	View projects. View projects and their teams
TIMESHEET_MANAGEMENT_SETTING_EDITOR Timesheet settings – editor	Manage timesheet settings. Set the timesheet submission deadline
TIMESHEET_MANAGEMENT_SETTING_READONLY Timesheet settings – read-only	View timesheet settings. View timesheet settings
TIMESHEET_MANAGEMENT_WORKFLOW_EDITOR Timesheet workflow – editor	Configure the timesheet-approval workflow. Create and edit the timesheet-approval workflow
TIMESHEET_MANAGEMENT_WORKFLOW_READONLY Timesheet workflow – read-only	View the timesheet workflow. View the timesheet-approval workflow configuration

Budget management

Departmental budgets and the expenses logged against them.

Permission	What it grants
BUDGET_MANAGEMENT_EDITOR Budget – editor	Full, company-wide budget access. Everything below, across every department Raise budget requests, log/edit/delete expenses, view all budgets
BUDGET_MANAGEMENT_READONLY Budget – read-only	View all budgets company-wide. View every budget, its expenses, summary, stats and activity
BUDGET_MANAGEMENT_DEPARTMENT_EDITOR Budget (own department) – editor	Manage budgets in your own department only. Log, edit and delete expenses in your department’s budgets Attach and remove expense receipts
BUDGET_MANAGEMENT_DEPARTMENT_READONLY Budget (own department) – read-only	View budgets in your own department only. View your department’s budgets, expenses and summaries
BUDGET_MANAGEMENT_INITIATOR Budget – initiator	Raise budgets and log expenses. Raise a budget request for a department Log an expense against a budget Update an expense Delete an expense Attach and remove expense receipts
BUDGET_MANAGEMENT_WORKFLOW_EDITOR Budget workflow – editor	Configure the budget-approval workflow. Create and edit the budget-approval workflow
BUDGET_MANAGEMENT_WORKFLOW_READONLY Budget workflow – read-only	View the budget workflow. View the budget-approval workflow configuration

Assets Management

The asset register (laptops, access cards, licences, keys), its assignment to staff through approval, returns, and who-holds-what reporting. Was “Onboarding” until October 2026.

Permission	What it grants
ASSETS_MANAGEMENT_EDITOR Assets – editor	Full access to assets management. Everything in the register and assignment actions below Record an asset as returned, lost, damaged or its access revoked (also for everything a leaver holds)
ASSETS_MANAGEMENT_READONLY Assets – read-only	View the register, every assignment and the reports. View the asset register and each asset’s history View the assignments report, a person’s assets and the leavers list Export the assignments report as CSV
ASSETS_MANAGEMENT_INITIATOR Assets – initiator	Assign assets to people. Assign one or more assets to a person (or to several people at once) View a person’s assigned assets Read the register when picking assets
ASSETS_MANAGEMENT_REGISTER_EDITOR Asset register – editor	Maintain the asset register. Add an asset with its category, tag and one-holder rule Edit, retire or reactivate an asset Delete an asset that has never been assigned View the register, the assignments report and the leavers list
ASSETS_MANAGEMENT_WORKFLOW_EDITOR Assets workflow – editor	Configure the asset-assignment workflow. Create and edit the asset-assignment approval workflow, its form fields and the emails its steps send
ASSETS_MANAGEMENT_WORKFLOW_READONLY Assets workflow – read-only	View the assets workflow. View the asset-assignment workflow configuration

Recruitment

Job openings and candidate applications. (Candidates apply publicly with no account.)

Permission	What it grants
RECRUITMENT_MANAGEMENT_EDITOR Recruitment – editor	Full access to recruitment. Everything in the job and application editors below
RECRUITMENT_MANAGEMENT_READONLY Recruitment – read-only	View recruitment. View job openings, applications and recruitment stats
RECRUITMENT_MANAGEMENT_JOB_EDITOR Job openings – editor	Manage job openings. Create a job opening Open or close a job opening
RECRUITMENT_MANAGEMENT_JOB_READONLY Job openings – read-only	View job openings. View job openings
RECRUITMENT_MANAGEMENT_JOB_APPLICATION_EDITOR Applications – editor	Manage candidate applications. Screen and advance candidate applications through stages
RECRUITMENT_MANAGEMENT_JOB_APPLICATION_READONLY Applications – read-only	View candidate applications. View candidate applications
RECRUITMENT_MANAGEMENT_WORKFLOW_EDITOR Recruitment workflow – editor	Configure the recruitment workflow. Create and edit the recruitment-approval workflow
RECRUITMENT_MANAGEMENT_WORKFLOW_READONLY Recruitment workflow – read-only	View the recruitment workflow. View the recruitment-approval workflow configuration

Employee exit

Offboarding and the exit-approval workflow.

Permission	What it grants
EXIT_MANAGEMENT_EDITOR Exit – editor	Full access to exit management. Initiate an employee exit / offboarding Manage exit records
EXIT_MANAGEMENT_READONLY Exit – read-only	View exit records. View exit records and exit stats
EXIT_MANAGEMENT_WORKFLOW_EDITOR Exit workflow – editor	Configure the exit-approval workflow. Create and edit the exit-approval workflow
EXIT_MANAGEMENT_WORKFLOW_READONLY Exit workflow – read-only	View the exit workflow. View the exit-approval workflow configuration

Appraisal

Performance cycles, review rounds and goals. Taking part as an employee, manager or reviewer needs no permission — any HR-licensed member does.

Permission	What it grants
APPRAISAL_ADMIN Appraisal – admin	Full administrative access to the appraisal system. Create, edit, activate and close appraisal cycles Create, edit and delete review rounds Enroll participants and list candidates Configure the appraisal-approval workflow Author dynamic form templates
APPRAISAL_ADMIN_READONLY Appraisal – read-only	View-only access to the appraisal system. View appraisal cycles, rounds, goals and participants

Form templates

The dynamic forms used by appraisal review rounds (and future modules).

Permission	What it grants
FORM_TEMPLATE_EDITOR Form templates – editor	Author dynamic form templates. Create a form template Edit a template and its fields Create a new template version Publish a template
FORM_TEMPLATE_READONLY Form templates – read-only	View form templates. View form templates and their fields

Learning management (LMS)

Courses, lessons, quizzes and enrolments. Taking a course as a learner needs no permission — any HR-licensed member can.

Permission	What it grants
LMS_ADMIN Learning – admin	Full administrative access to the LMS. Create, edit, version and delete courses Manage modules and lessons (including video) Build quizzes, questions and pass marks Assign and unassign enrolments, set deadlines Download admin certificates
LMS_ADMIN_READONLY Learning – read-only	View-only access to the LMS. View courses, quizzes and enrolments View all LMS reports, including CSV exports

Document management (EDMS)

Administration of the document system. Access to individual documents and folders is governed by per-document access levels (View → Download → Contribute → Manage → Owner) that you grant per file, not by these admin permissions — anyone with a Document Management licence can be given document access.

Permission	What it grants
EDMS_ADMIN Documents – admin	Full administrative access to document management. Query the document audit log Everything in “Storage – admin” below
EDMS_STORAGE_ADMIN Storage – admin	Manage storage providers and credentials. Add, edit, activate and test storage providers Sweep orphaned files Run, pause, resume and cancel storage migrations

Sales & Finance

Finance uses six independent axes rather than a single editor/read-only pair, so you can separate who drafts documents, who issues them and takes money, who touches the ledger, and who configures tax and settings. Approving a finance document routed to you needs no permission — the workflow decides who acts.

Permission	What it grants
FIN_MANAGEMENT_READONLY Finance – read-only	View finance records and reports. View invoices, bills, payments, credit notes, quotes and orders View the chart of accounts, journals and manual journals View reports: AR/AP aging, statements, sales, P&L, balance sheet, trial balance, general ledger, VAT/WHT
FIN_MANAGEMENT_EDITOR Finance – editor	Create and edit draft finance documents. Create and edit customers, vendors and items Draft invoices, bills, credit notes and vendor credits Draft quotes, sales orders, purchase requisitions and orders Draft goods receipts, stock adjustments and delivery notes Draft recurring invoices Create chart-of-account ledger accounts and finance budgets
FIN_MANAGEMENT_INITIATOR Finance – initiator	Issue documents and take money in. Issue an invoice Record a customer payment and apply it Create a sales receipt (cash sale) Issue and apply credit notes Post a bill Send, accept and convert quotes; confirm sales orders Submit purchase requisitions; issue purchase orders Post goods receipts Create bank transfers Generate an invoice pay-link
FIN_ACCOUNTANT Finance – accountant	General-ledger powers. Create manual journals Void and reverse posted documents Unapply and void payments; record and void vendor payments Close and reopen fiscal periods and years Import opening balances Run FX revaluations and set exchange rates Perform bank reconciliations
FIN_SETTINGS_ADMIN Finance – settings admin	Finance configuration. Document numbering, currencies, default accounts and branding Configure the payment gateway Manage bank accounts and price lists Manage the chart of accounts and finance budgets
SALES_AGENT Sales agent	Sell on behalf of the company and see your own performance. Raise and manage quotes, sales orders, invoices and recurring invoices See the payments and receipts that settle them (read-only) See your own sales scorecard: what you sold, what turned into payment, and what is still owed Only sales credited to you (or raised by you) are visible — never a colleague's
FIN_TAX_ADMIN Finance – tax admin	Tax configuration and returns. Create, edit and delete tax rates Create, edit and delete tax groups Prepare VAT and WHT returns
FIN_MANAGEMENT_WORKFLOW_EDITOR Finance workflow – editor	Configure finance approval workflows. Create and edit finance approval workflows
FIN_MANAGEMENT_WORKFLOW_READONLY Finance workflow – read-only	View finance workflow configuration. View finance approval workflow configuration

Procurement

Procurement uses a read tier, an initiator tier for everyone who buys, a buyer editor, two narrower admin roles and a workflow editor. Approving something routed to you needs no permission — the workflow decides who acts.

Permission	What it grants
PMS_MANAGEMENT_READONLY Procurement – read-only	See the whole company's procurement: suppliers and their compliance, purchase requests, contracts, sourcing events, match exceptions and the spend reports. See the whole company's procurement: suppliers and their compliance, purchase requests, contracts, sourcing events, match exceptions and the spend reports No changes
PMS_MANAGEMENT_INITIATOR Procurement – initiator	Raise purchase requests and follow your own through approval, ordering, receipt and payment. Raise purchase requests and follow your own through approval, ordering, receipt and payment Grant this broadly — it is the permission every employee who buys anything needs, and it shows them only their own requests
PMS_MANAGEMENT_EDITOR Procurement – buyer (editor)	The buyer's role: manage suppliers, run sourcing events and award them, maintain contracts and the catalog, and resolve match exceptions on held bills. The buyer's role: manage suppliers, run sourcing events and award them, maintain contracts and the catalog, and resolve match exceptions on held bills Includes everything a procurement reader can see
PMS_SUPPLIER_ADMIN Procurement – supplier admin	Supplier master-data administration: suspend or block a supplier, reinstate one, record a sanctions or PEP screening, and adopt the finance vendors that already exist into procurement. Supplier master-data administration: suspend or block a supplier, reinstate one, record a sanctions or PEP screening, and adopt the finance vendors that already exist into procurement.
PMS_SETTINGS_ADMIN Procurement – settings admin	Configure procurement: spend categories and their required documents, cost centres, match tolerances, budget-control and sourcing policy, and the supplier portal. Configure procurement: spend categories and their required documents, cost centres, match tolerances, budget-control and sourcing policy, and the supplier portal.
PMS_MANAGEMENT_WORKFLOW_EDITOR Procurement – workflow editor	Design the procurement approval chains on the visual canvas — who approves a supplier, a request, a bank-detail change, a contract, an award and a change order — with those records' custom fields and step emails. Design the procurement approval chains on the visual canvas — who approves a supplier, a request, a bank-detail change, a contract, an award and a change order — with those records' custom fields and step emails.
PMS_MANAGEMENT_WORKFLOW_READONLY Procurement – workflow read-only	View how the procurement approval chains, custom fields and email templates are configured. View how the procurement approval chains, custom fields and email templates are configured No changes
PMS_DEPARTMENT_READONLY Procurement – cost-centre owner	See every purchase request charged to a cost centre you own, not just your own requests. See every purchase request charged to a cost centre you own, not just your own requests For a budget holder who approves their department's spend without needing the whole company's procurement

Continue reading

shield Roles & approvals How permissions and approval workflows fit together. badge Users & seats Assign licences and permissions to people.

support_agent

Still need a hand?

Reach the Hubtoll team on WhatsApp or email cloud@digitalvortextech.org. We usually reply within a few hours (Mon–Fri, 8:00–19:00 GMT).