Members & Roles

Roles & Permissions

Permissions control all actions in Resyrv. Access groups put permissions into useful default sets. Custom groups cover the other cases.

How permissions work

Each action has a named permission, for example to view the schedule, log flights, approve external payments, or ground an aircraft. The effective permissions of a member are all the permissions from all their access groups. The UI hides the actions that a member cannot do. The server also enforces the same rules independently.

Built-in groups

• Administrator - top-level access: all permissions except to act as an instructor. You cannot remove permissions from this group.
• Manager - lead for daily operations: scheduling, members, maintenance, and operational reports. No billing or access management.
• Staff - front desk and support: read access, documents, basic scheduling, and permission to log flights.
• Member - baseline access: view the organization and manage their own schedule.
• Instructor - shows in instructor pickers and the directory. It also has the instruction permission set.
• Maintainer - maintenance and squawk workflows, management of aircraft and aircraft documents, dispatch, and compliance reports.
• Renter - a pilot who rents: book and manage their own reservations, view aircraft and documents, and file squawks.

The organization owner is not a group. The owner always has full access, including subscription billing and the Stripe connection.

Custom roles

In Roles & Access, you can make custom roles from the full permission catalog. The catalog uses the same groups that you see in all other places: scheduling, flights, maintenance, billing, training, and others. For example, a “maintenance officer” is often a member plus the maintenance group.

Give one person an extra permission

Do not make a near copy of a role. A member gets all the permissions from all their groups. Thus, in Roles & Access, give the extra group in addition to the groups that the member has. Or make a small custom group with only that permission.

Permissions to book and dispatch

To book a flight for another person and to release a flight that you are not on are front desk tasks. These tasks do not need permission to manage who belongs to the organization. Thus each task has its own permission:

• Book for other members - set another person as the pilot in command on a reservation. A dispatcher or an instructor can book for a member without permission to manage the roster.
• Dispatch anyone’s flight - release, return, or cancel the dispatch of a flight that you are not part of. This is the dispatch desk for the full fleet.
• Dispatch flights I’m on - release a flight where you are the pilot in command or the instructor. An instructor can dispatch the lessons that they teach without rights for the full fleet.

By default, Administrator, Manager, Staff, and Instructor have these permissions. When Resyrv added these permissions, no person lost access. Each group that could already dispatch across the fleet kept that ability.

The escalation guard

You cannot assign a role with more power than your own role. You can only give roles whose permissions are a subset of your permissions. Thus an admin cannot make themselves, or a friend, the owner.

When a member cannot see something

1. Open the profile of the member and look at their effective permissions - this shows all that they can do and the source of each grant.
2. Look at their authorized locations - the member does not see aircraft based at locations that are not on that list.
3. Only after these checks, suspect a bug.

Can’t find what you need? Contact us - a real person reads every message.