Your role in Flexshop
The four Flexshop roles, which app each one opens, and why changing Integrations needs a second role.
Flexshop has four roles of its own. An administrator gives them in the Tenant Portal, where the names are shown in English: Employee, Shop Supporter, Finance Approver and Application Administrator. Nobody gives roles inside Flexshop itself.
The four roles
| Role | Opens | In short |
|---|---|---|
| Employee | Portal | Browses, requests, buys second-hand, follows requests, confirms delivery and sends devices back. Approves only when a Manager step names them. |
| Shop Supporter | Portal | Everything an Employee can do, plus every Supporter step, decided under Approvals in the portal. Cannot open the console. |
| Finance Approver | Portal | Everything an Employee can do, plus every Finance step. A Finance step is added when a request goes over budget. Cannot open the console. |
| Application Administrator | Console and portal | The whole console: the queue, ordering, the Storefront, budgets, approval flows, returns, the marketplace and notifications. Decides Shop admin steps. Sees Integrations read-only. |
Integrations needs a second role
To change anything on the Integrations page you need Application Administrator in Flexshop and Workspace Administrator in the workspace (the Tenant Portal calls it Tenant Administrator). With only one of them the page is read-only. Workspace Administrator is not a Flexshop role; it is also the only role that can set up the Webmercs connection in Integration Hub. See The Integrations page and who may change it.
Rules that apply to everyone
- Manager is not a role. For each request the Manager step resolves to one person: the line manager from HR Management, else the approver named on the budget group, else the fallback approver. See Who approves: roles and the Manager step.
- A step needs its role. An Application Administrator cannot decide a Supporter or Finance step unless they also hold that role.
- Nobody decides their own request. See You cannot approve your own request.
- Roles are not seats. Flexshop is licensed per seat in the Tenant Portal, but what you can do follows your role.
The full list of who can do what is in Roles and permissions.
A new role reaches Flexshop's server within about five minutes, and the console at your next sign-in. The read-only banner on Integrations says the same: "If you were just given a role, sign out and sign in again."