How-To: Manage Permissions Groups

What is a Permissions Group?

Permission groups are used to grant employees access and ability to manage or view information in Tātou Field App and/or Tātou Office App.

FEATURE UPDATE: On 9 March 2026 we expanded permissions settings to give our customers more flexibility to tailor permissions group access. See release notes here.

Standard Permission Groups

Some permission groups are standard to every Tātou account. These are intended to give users basic functionality as you start with Tātou, and give some guidance as to how Permissions groups can be used to grant specific access.

System Managed Permission Groups

These cannot be edited which ensures basic system access for users within these groups, and safeguard against changes that may remove access to key users within your organisation.

Administrator 🔒 - Full access to Office and Field
Client 🔒 - Can login to Tātou Office App and approve jobs tracked on their locations and blocks
Kiosk 🔒 - Can clock employees in and out (for operations using the Kiosk feature)

Editable Standard Permissions Groups

These have default permissions settings based on user descriptions, and can act as a jumping off point for tailoring access for your employees.

Crew leader - Can track time for themselves and their crew
Crew member - Can view their timesheets and manage their own profile
Individual - Can track time for themselves

How-to: Edit a Permissions Group

If you are at all unsure about changes you’d like to make to a permissions group, please contact support@tatou.app and we’d be happy run through any changes with you.

Not everyone can edit a permission group. Only those with Administrator permissions, or those whose permission group has been granted:

Administrative -> Permissions Groups -> ENABLED & EDIT Permissions

Select the EDIT button
Review each Permissions Section and select the access level appropriate
- ENABLED - able to view
- EDIT - are able to make changes
- DELETE - are able to delete
Select the SAVE button

Invalid permissions settings cannot be saved. If a permission requires another permission granted it will either be greyed out OR you will receive an error message once you’ve selected SAVE. These errors must be corrected before any changes that have been made can be saved.

Important Notes:

Divisions: Divisions can be used to restrict view of certain information from groups of users based on organisational structure.
- Restrict to Division (clients, locations, task categories, or employees) means that this information is not visible to people below that specific division.
- Employees in the same division are able to see information above (if not restricted) and below them based on their permissions settings.

What Access Options are there?

Permissions Groups have gotten an upgrade and roll out converted like for like permissions settings to the new Permission Group Options. These groups can now be further tailored using the options below.

= optional setting
❌ = no options for Edit or Delete (e.g. Crew Leader - Employee can either track or not track)

Remember: Permissions Groups and Divisions can be used together to restrict access and visibility of certain information in Tātou.

Category	Name	Enabled	Edit	Delete	Permission Note
App Access	Field App		❌	❌	login works for Field App
App Access	Office App		❌	❌	login works for Office App
Profile	My Profile		❌	❌	adds profile view to Field App
Jobs	My Jobs
Jobs	Set Job Rates		❌	❌	can change job rates & allows visibility of Unit Rates on contract jobs
Jobs	Crew Leader		❌	❌	can track jobs for other crew members
Jobs	All Jobs				can see all jobs tracked within DIVISION rules
Jobs	Approve Jobs		❌	❌	can approve jobs for Client Access
Financials	Unit rates		❌	❌	can see unit rates
Financials	Hourly rates		❌	❌	can see hourly rates
Financials	Restricted hourly rates		❌	❌	can see hourly rates of Employees whose Hourly Rate is marked RESTRICTED in their Employment Period
Financials	Job costs		❌	❌	required for Projects/Invoices
Financials	Top-ups		❌	❌	required for Projects/Invoices
Financials	Job income		❌	❌	required for Invoices
Operations	Scheduled tasks
Operations	Projects				requires Job costs/Top-ups
Operations	Invoices
Operations	Send Invoices		❌	❌
People	Employees
People	Details			❌
People	Medical
People	Employment
People	Training
People	Hourly rates			❌
People	Restricted hourly rates		❌	❌	requires Financials \| Restricted Hourly Rates
People	Recruitment		❌	❌
People	Groups
People	Roles
People	Pay Periods
People	Attendance		❌	❌
Reporting	Reports and exports		❌	❌
Reporting	Custom Reports
Reporting	Dashboards			❌
Reporting	Overview dashboard		❌	❌
Reporting	Overwork (widget)		❌	❌	requires Overview dashboard
Reporting	Performance Dashboard		❌	❌
Reporting	Productivity dashboard		❌	❌
Reporting	Workload dashboard		❌	❌
Reporting	Custom dashboards
Administrative	Tasks
Administrative	Clients
Administrative	Equipment
Administrative	Employee Expenses
Administrative	Message topics
Administrative	Divisions
Administrative	Permission groups
Administrative	Settings			❌
Administrative	QR code generator		❌	❌
Administrative	Integrations