Roles and What Each Sees: Owner, Technologist, Foreman, Operator

At a factory, people with very different tasks work simultaneously. The owner looks at money and deadlines. The technologist describes how to make a product. The foreman assigns work. The operator performs one operation on one machine. The quality controller checks quality.

Everyone needs their own part of the system, and no one needs the whole thing. This article explains how access is distributed and how to configure it so that people see what they need and nothing more.

Two Types of Users

This is the first thing to understand.

Users with an account. They log in with email and password, have a role, and see sections of the system according to that role. These include owners, managers, technologists, sales managers, and foremen.

Shop floor employees without an account. They log in at a kiosk or on a phone with a card, QR, or PIN and only see a few allowed pages. These include operators, welders, and packers.

The second type exists because creating an email and password for every welder is inconvenient and unnecessary.

Roles with an Account

• Owner. Full access to all sections, settings, and billing.
• Administrator. Almost full access. Manages people, rules, integrations.
• Member. Regular employee. Sees working sections according to granted rights. Most technologists, managers, and foremen have this role.
• Limited Member. Narrow access to specific parts.
• Terminal. Technical account for a shared device on the shop floor, without personal login.

Roles are assigned on the team management page, accessible to the owner and administrator.

Typical Distribution by Position

Owner, Production Manager — owner or administrator role. Uses the Control Center, Production Board, "Factory Live" and "People & Results" pages, and the Costing Advisor.

Sales Manager — member. Customer inquiries, Costing Studio, Public Studio.

Designer, Technologist — member, sometimes administrator. 3D import, configurator, routings, nesting, drawings.

Planner — member. Production Orders, Production Board, APS Planning, Material Flow.

Foreman — member, tied to a hall. Foreman's Panel, work distribution, hall tasks.

Quality Controller — member. Quality Management.

Operator, Welder — shop floor employee without an account. Operator's Panel, drawings, personal timesheet and schedule.

Visibility by Hall

If the factory has halls, access is also divided by them.

• A foreman tied to a hall only sees its tasks, its people, and its machines.
• A hall terminal only shows employees of that hall and those without a hall in the login list.
• Owners and administrators see all halls.

Until any halls are created at the factory, there are no restrictions: everyone sees everything.

Therefore, if a foreman sees other people's employees, most likely they are not tied to a hall as a foreman.

People Data — Separate

Productivity, lateness, defects of a specific person — these are sensitive data. Access to them is configured separately from access to production.

In Factory Configuration → Metrics, the factory decides:

• whether foremen see the productivity of their people;
• whether they see management notes;
• whether to show colleagues' names in comparisons;
• whether to record who accessed an employee's profile.

The "People & Results" page is visible to the owner, administrators, foremen (only their halls), and HR with access to timekeeping. The "Bonuses" tab is only visible to the owner and administrators.

Absence type (sick leave or vacation) on the "Factory Live" page is only visible to those who are allowed. Others simply see "absent."

Who Issues Shop Floor Access

Owners, administrators, and roles with specific permissions can issue a card or PIN to an employee. A regular member cannot issue access to themselves or anyone else.

This protects timekeeping. If a foreman could issue themselves someone else's PIN, clock-in records would be meaningless.

Access Profiles for Shop Floor Employees

What an employee sees on a kiosk or phone is determined by their access profile: a set of allowed pages.

Typical profiles:

• Operator — operator's panel, drawings, my timesheet, my schedule;
• Welder — the same, but only welding is visible in the operator's panel;
• Nesting Operator — additionally nesting.

One profile can be set as the default, and for an individual, the set of pages can be changed in their card.

Actions Requiring Two People

The system does not allow some decisions to be made by one person.

• Scrapping defects. One proposes, another approves.
• Importing orders from the client's system. Orders arrive for review, and only after approval by the owner or administrator do they become drafts.
• Changing time standards based on a suggestion. Applied by the owner or administrator, the change is recorded in the log.

What the AI Assistant is Allowed To Do

The assistant can read data, prepare proposals, and suggest actions. But it does not perform actions that change something itself: each is confirmed by a human.

For example, the assistant can suggest replacing a defect or reallocating work. The foreman must click "yes."

Which actions the assistant can suggest and who confirms them is configured by the owner.

Pages That Are Not Visible

The "Production," "Engineering," and "Quality" sections only appear in workspaces with a production profile. Individual pages depend on installed packages: the kitchen designer is visible if the kitchen solution package is installed, and blends and packaging if this type of production is enabled.

If you don't see a menu item described in the help, one of three reasons applies: your role doesn't grant access, the required package isn't installed, or your plan doesn't include this section.

Principles to Maintain

• Minimum necessary. Grant access to what a person needs for work, and no more.
• One person — one login. A shared PIN for a team makes timekeeping and traceability meaningless.
• Revoke immediately. If a person quits or loses a card, revoke access the same day.
• Explain to the team what is being measured. People are more comfortable with tracking when they know exactly what is being recorded and why.

Frequently Asked Questions

Foreman sees people from another hall

They are not tied to a hall. Open the hall card in factory configuration and add them as a foreman.

Operator does not see drawings

The "Drawings" page is not in their access profile. Add it to the profile or in their card.

Can a foreman see salary?

Production pages do not show salary. The "Bonuses" tab is only visible to the owner and administrators.

Manager does not see the "Production" section

Check their role and granted rights on the team management page.

Does every welder need an account?

No. Shop floor employees only need shop floor access: a card, QR, or PIN.

Read More

• Shop Floor Access: Kiosks, Cards, and PINs
• Factory Configuration
• People & Results