Administration and states

Users and grants

A role is what you may do. A grant is which rows. No role bypasses the boundary.

Partly builtFictional data throughout. Nothing on this page comes from a real programme.

projectsmanager.ai

ADMINISTRATIONUsers & grants Audit log Sync status Settings

Administratorgrant: tenant

Administration › Users & grants

People, roles and grants

EXAMPLE DATA

PERSON	ROLE · POWERS	GRANT · WHICH ROWS	LAST SIGN-IN	STATE
Administrator	Administrator	tenant · everything in Northland (demo)	today 09:12	ACTIVE
Minister, Education	Viewer	ministry · Ministry of Education	1 Oct	ACTIVE
Director, Textbooks	Implementing unit	agency · Directorate of Textbooks	yesterday	ACTIVE
Project officer	Implementing unit	project · DEDU101	3 Oct	ACTIVE
Field officer	Viewer	activity · 1.5.1 Monitoring visits	29 Sep	ACTIVE
Donor representative	Donor	tenant · read and aggregates	5 Oct	ACTIVE
Former staff member	Implementing unit	agency · Directorate of Planning	2 Oct	LOCKED UNTIL 10:42

A ROLE IS WHAT YOU MAY DO

Viewer reads. iu_user also writes cost tables, plans and contracts. Donor reads and sees aggregates. Admin manages people.

A GRANT IS WHICH ROWS

A grant names a node: country, ministry, agency, project or activity. Everything beneath it is reachable and nothing beside it is.

NO ROLE BYPASSES THE BOUNDARY

An administrator holds a grant too. It is wide, and it is still a grant.

GRANT ACCESS

PERSON

New staff member

ROLE

Implementing unit

LEVEL

Project

NODE

DEDU102 · Teacher guide revision

REFUSED WHEN OUTSIDE YOUR OWN EXTENT
A director with an agency grant cannot grant a node in another agency. The refusal names both extents.

WHY SIX TIERS, NOT SIX SCREENS

Field officer, project staff, director, minister, head of state and global partner are not separate products. They are the same product seen from different grants.

Request a demo

On a phone the screen is shown as a small layout preview. Open this page on a larger screen to read it, or read the points below.

What this screen shows

Roles and grants are separate, so a director and a field officer can share a role and differ in reach.
A grant is designed to be givable only inside the granter's own extent.
A locked account is designed to say when it unlocks.

Why it works this way

An administrator holds a grant too. It is wide, and it is still a grant.

What exists today

Users can be created and edited today. There is no route or screen for giving grants yet; the grant editor shown here is a design.