Understand roles, positions, and property access

Holidario uses several layers to decide what a person can do. Configuring only one layer may leave the user without access or give them more access than they need.

The four layers#

1. Team membership: accepting an invitation adds the account to the agency.
2. Role: grants groups of actions for work such as front desk, management, cleaning, or property ownership.
3. Employee position: describes the person's job for scheduling and human-resources purposes; it does not grant access by itself.
4. Resource authorization: limits access to specific properties, tasks, tickets, or other records when applicable.

A person may have several roles. Grant only the combination required for their actual work.

Review the member matrix#

Under Settings > Team, open Team Members & Roles. The matrix shows ten members per page; use the controls below it to review the remaining pages. Search checks the complete team and replaces the current page with matching members until you clear the search text.

Examples#

• A manager can coordinate operations without managing the subscription or invitations.
• A front desk employee needs guest and reservation actions, but not the agency's full configuration.
• A managed property owner needs both the appropriate role and explicit authorization for their properties.
• A maintenance provider must be linked to their provider profile to receive authorized tickets.

Required check#

After changing someone's access, validate it with that person's account:

• they can complete their first task;
• modules unrelated to their work do not appear;
• the visible properties and periods are correct;
• an unauthorized action remains denied.

Do not test the result from an administrator account. It would show more functions and make the check invalid.