Roles and Permissions

VBIC uses three roles. A user belongs to exactly one role at a time.

Role matrix

Action	Technician	Editor	Admin
Sign in	✓	✓	✓
Run published templates	✓	✓	✓
View own-org templates	✓	✓	✓
View Layouts tab		✓	✓
Create / edit layouts		✓	✓
Create / edit / delete templates		✓	✓
Publish / unpublish / archive templates		✓	✓
Generate and redeem share codes		✓	✓
Revoke template shares		✓	✓
View Users tab			✓
Add users			✓
Change user roles			✓
Deactivate / reactivate users			✓

Role descriptions

Technician

The field-level role. Technicians can run any published or shared template. They cannot see drafts, archived templates, the Layouts tab, or the Users tab.

Editor

Editors build and maintain the inspection content — layouts and templates. They can publish, archive, and share templates. They cannot manage users.

Admin

Admins have full control over their organisation's content and users. They can do everything an Editor can, plus add users, change roles, and deactivate/reactivate accounts.

Notes

• Role changes take effect on the user's next sign-in (when the Cognito token refreshes).
• An active session continues to use the previous role until the next sign-in.
• The Users tab is only visible to Admins.
• The Layouts tab is only visible to Editors and Admins.