Module Permissions: What You Can and Can't Touch

This page explains the My Modules list on your dashboard: the twelve modules, the three access levels, where grants come from, and what to do when your access is wrong in either direction. This page summarizes the Data Access & Least Privilege policy (Data Access and Least Privilege Policy), which governs.

The twelve modules

The module list is fixed

1. Customers: customer records and profiles
2. Appointments: the booking book
3. Payments: taking and viewing payments
4. Invoices: invoicing
5. Deposits: deposits held against bookings
6. Refunds & Disputes: issuing refunds, working disputes
7. Gift Cards & Credits: gift card and store credit handling
8. Inventory: stock levels and adjustments
9. Products & Services: the catalog and service menu
10. Purchasing: ordering from suppliers
11. Communications: messaging customers
12. Reports: business reporting

Each module you hold carries an access level: Read (see it), Write (see it and change it), or Full access. The levels mean what they say: Read on Payments lets you look up what a customer paid; it does not let you take a payment.

Where grants come from

Grants are permission records assigned per staff member in Admin → Staff by someone with the authority to grant them. The server checks the grant on every request; this is not a display setting that a clever URL can bypass. Your grants are tied to your identity and end with your session, under the Authentication Controls (Authentication Controls Policy).

The model is additive: you have what you are granted, and what you are not granted simply is not there. There are no "denied" rows and no "none" placeholders. An ungranted module is absent from your list. This answers the most common confusion: "I used to see Invoices and now it is gone" means the grant was removed, not that the page is broken.

Where modules open

Your dashboard describes your grants, but the modules themselves open in the admin portal. The employee portal is your station surface: appointments, shifts, HR, support; the business systems live next door. If you hold a grant and cannot find where to use it, you are probably looking in the wrong portal. Your manager can point you to the right place. Rules for working inside granted modules are in the Acceptable Use of Admin Tools policy.

When your access is wrong

You need access you do not have. A groomer who needs Write on Gift Cards & Credits to sell them at the front desk, or a shift lead who needs Read on Reports, makes a manager request. State which module, which level, and why the job needs it. "I need access to everything" will correctly get you nothing: least privilege is the policy, and specific, justified requests are approved faster than broad ones.

You have access you should not. Perhaps you changed roles and kept the old grants, or you were covering a shift and temporary access was never pulled back. Say something.

What managers do on their side

Grants are managed in Admin → Staff, per staff member, per module, per level. Granting is itself a privileged action: not everyone in the admin portal can hand out Full access to Payments. If your manager says "I can't change that," they may genuinely lack the authority, and the request goes up a level. That is the system working, not bureaucracy.

The boundary that matters most

Module permissions govern business systems. They do not control your station work: your appointments, your shifts, your time clock, and your HR page are yours by virtue of being you, not by grant. If you can sign in, you can work your day. The modules govern everything beyond that: the money, the customers, the inventory, the reports. That split is intentional: your day-to-day never depends on a grant, and the business's sensitive operations always do.