How permissions work
Project Commander uses entity-level permissions to control what each user can access. An entity is a type of document or record — Variations, Dayworks, Invoices, Purchase Orders, and so on. For each entity, you can grant a user one of three access levels:
| Access level | What it allows |
|---|---|
| Read & Write | View, create, edit, and delete records of this type |
| Read Only | View records only — no creating, editing, or deleting |
| Deny | No access at all — the entity is hidden from the user |
This page is available to company administrators only. Admin and Super Admin users bypass entity permission checks entirely — they always have full access.
Assigning permissions
- 1
Navigate to Settings > Company > Manage Permissions.
- 2
Select the user you want to configure from the dropdown at the top of the page. You can search by name to find them quickly.
- 3
The page displays all available entities grouped by category:
Group Entities Contract Management Variations, Dayworks, Applications, Payment Notices, Invoices, Sales Credit Notes Procurement Purchase Orders, Delivery Notes, Goods Return Notes, Credit Notes, Invoice Checking, Direct Costs Settings Entity-level access to settings areas - 4
For each entity, select Read & Write, Read Only, or Deny using the radio buttons.
Changes take effect immediately — there is no separate save step.
Entity permissions vs RBAC
Entity-level permissions provide broad access control — can a user see Variations at all, and can they edit them? If your company needs finer control — for example, allowing a user to create Variations but not approve them, or restricting access to only their own projects — you need action-level permissions (RBAC).
See RBAC for details on setting up action-level permissions.
Start with entity permissions to get your team up and running. Add RBAC later if you find you need more granular control over who can do what.
Next steps
- RBAC — fine-grained action-level permissions with scope controls.
- Managing Users — invite users and assign roles.
- Managing Your Company — update company details and branding.