Roles and permissions
Who can do what in Flexshop, role by role, including the two roles that cannot open the console.
Who can do what in Flexshop. The role names are the Tenant Portal's, which are English in every language. "Workspace Administrator" is the platform role the Tenant Portal calls Tenant Administrator; it is not a Flexshop role.
The matrix
| Action | Employee | Shop Supporter | Finance Approver | Application Administrator |
|---|---|---|---|---|
| Open the employee portal | Yes | Yes | Yes | Yes |
| Browse, request, follow requests, confirm delivery | Yes | Yes | Yes | Yes |
| Buy second-hand, My assets, send devices back | Yes | Yes | Yes | Yes |
| Decide a Manager step that names you | Yes | Yes | Yes | Yes |
| Decide Supporter steps | No | Yes | No | Only with Shop Supporter too |
| Decide Finance steps | No | No | Yes | Only with Finance Approver too |
| Decide Shop admin steps | No | No | No | Yes |
| Open the admin console | No | No | No | Yes |
| Bulk decide in the queue | No | No | No | Yes |
| Order, Retry, Mark as ordered, Record as ordered (by hand) | No | No | No | Yes |
| Storefront, Budgets & groups, Approval flows, Notifications | No | No | No | Yes |
| Returns, grading, the marketplace, Mark it paid | No | No | No | Yes |
| See the Integrations page | No | No | No | Yes, read-only |
| Change Integrations (HR Management, vendor ordering, delivery, policies) | No | No | No | Only with Workspace Administrator too |
| Decide your own request | No | No | No | No |
Shop Supporters and Finance Approvers cannot open the console. If they try, they see "This console is for shop administrators" with a button to the employee portal. They decide their steps under Approvals in the portal.
Outside Flexshop
- Setting up the Webmercs connection in Integration Hub: Workspace Administrator only.
- Giving Flexshop roles: in the Tenant Portal.
The console's account menu shows Admin for an Application Administrator; Member is the word for other grades. A role change can take up to five minutes to reach Flexshop, and the console sees it at your next sign-in. See Your role in Flexshop.