5 min read · Updated
Site Owner Roles & Permissions
LogicSite uses a three-tier role system for site owners. Each site role determines what actions a user can take across the portfolio workspace.
Three-Tier Architecture
LogicSite separates roles into three independent layers:
| Layer | Scope | Roles |
|---|---|---|
| Organization Role | Org-wide settings, billing, team management | Owner, Admin, Member, Support |
| Site Role | Per-site access to properties and structures | Facility Manager, Coordinator, Occupant |
| Project Role | Per-project membership on contractor projects | Project Manager, Engineer, Technician, etc. |
Site owners interact primarily through Site Roles. Organization owners and admins automatically bypass site-level checks and receive Facility Manager permissions on all sites.
Site Permissions Matrix
Site-Level Permissions
These control what users can do within the portfolio workspace itself:
| Permission | Facility Manager | Coordinator | Occupant |
|---|---|---|---|
| View sites & structures | Yes | Yes | Yes |
| Edit site details | Yes | No | No |
| Manage site users | Yes | No | No |
| Manage structures (create/edit/delete) | Yes | No | No |
| Manage vendors (invite/remove) | Yes | Yes | No |
| Assign floor plans | Yes | Yes | No |
| Fork floor plans | Yes | Yes | No |
| Move devices | Yes | Yes | No |
| Create service requests | Yes | Yes | Yes |
| Comment on projects | Yes | Yes | Yes |
| Attach photos | Yes | Yes | Yes |
| View devices | Yes | Yes | Yes |
| View projects | Yes | Yes | Yes |
Implicit Project Permissions
When a site owner accesses a contractor's project through their site role, they receive these project-level permissions automatically:
| Permission | Facility Manager | Coordinator | Occupant |
|---|---|---|---|
| View project | Yes | Yes | Yes |
| Project messages | Yes | Yes | No |
| View devices | Yes | Yes | Yes |
| Upload media | Yes | Yes | Yes |
| Create comments | Yes | Yes | Yes |
| Edit own comments | Yes | Yes | Yes |
| Delete own comments | Yes | Yes | Yes |
| View floor plans | Yes | Yes | Yes |
| Create issues | Yes | Yes | Yes |
| View issues | Yes | Yes | Yes |
| View reports | Yes | Yes | No |
| View timeline | Yes | Yes | Yes |
| Closeout sign-off | Yes | No | No |
Closeout sign-off is exclusive to Facility Managers. This ensures only authorized personnel can formally accept completed work on behalf of the site owner.
How Roles Affect the UI
LogicSite dynamically shows or hides interface elements based on your site role. Here is what each role sees:
File Tree (Sidebar)
| Element | Facility Manager | Coordinator | Occupant |
|---|---|---|---|
| Browse sites & structures | Yes | Yes | Yes |
| Edit Site / Delete Site menu | Yes | Hidden | Hidden |
| Rename / Delete Folder menu | Yes | Hidden | Hidden |
| Edit / Relocate Structure menu | Yes | Hidden | Hidden |
| New Structure / New Folder buttons | Yes | Hidden | Hidden |
| Create Site (+) button | Yes | Hidden | Hidden |
| Edit Sites (gear) button | Yes | Hidden | Hidden |
| Drag-and-drop reorder | Yes | Disabled | Disabled |
Vendor Page
| Element | Facility Manager | Coordinator | Occupant |
|---|---|---|---|
| View vendor list | Yes | Yes | Yes |
| Invite Vendor button | Yes | Yes | Hidden |
| Remove Vendor action | Yes | Yes | Hidden |
| Request Service | Yes | Yes | Yes |
| Message vendor | Yes | Yes | Yes |
Project Views
| Element | Facility Manager | Coordinator | Occupant |
|---|---|---|---|
| View project overview | Yes | Yes | Yes |
| Approval inbox | Yes | No | No |
| Closeout sign-off button | Yes | Hidden | Hidden |
| Device operational status | Yes | Yes | View only |
Capability Overrides
Organization admins can customize the default permission set for each site role using capability overrides. This allows fine-grained control without creating custom roles.
Overrides work at two levels:
- Organization-level — Applies to all sites in the organization
- Project-level — Applies to a specific project (not yet implemented)
Overrides are additive and subtractive. You can grant permissions that a role does not normally have, or revoke permissions that it does. The override always takes precedence over the base permission set.
Assigning Site Roles
Site roles are assigned through the site_access table. Users can have different roles on different sites within the same organization.
Navigate to the site settings (Facility Manager only).
Open the Users tab.
Invite a user by email and select their site role.