Roles and permissions

Account type and roles determine what an account sees and may do in the admin panel.

Account types

Location: Account > tab Details, section Account type. Visible to: admins.

The account of an organizer after **Change**, as super admins see it.

Account type	Help text and effect
Participant account	“Registers participants, sees registrations and receipts.” No access to the admin panel; the account uses the website.
Organizer	“Edits offers of the assigned organizers.” Access to the admin panel with the offers of the assigned organizer profiles and the individually shared offers (Access of organizers to offers).
Admin	Only super admins can select it. “Manages seasons, offers and organizers.” Access to the admin panel with all offers and the areas of the team (What each role sees); further areas are unlocked by the roles.

Rule	Content
Several account types	An account can have several account types at the same time.
Existing account	The section names the account types of the account. Change expands the selection.
Account type Admin	Includes the permissions of an organizer, but no role.
Removing the account type Admin	Also removes Super admin and all roles. Anyone who assigns the account type again later assigns the roles again.

Roles

Location: Account > tab Details, section Scope of access. Visible to: super admins, only for accounts with the account type Admin.

The account of an admin, as super admins see it. **Global admin** is not shown.

Role	Unlocks
Super admin	“Access to all features.” All roles, plus: seeing and editing admin accounts, Sign in as, Outbox, Consents, Data subject rights, Settings (including access codes and service accounts). For super admins the selection Roles is hidden.
View and create participants	Menu item Participants; in the participant list View registration, Change attendance status, Payments; global search for participants (`#`); create palette Participant; under Accounts the participants of a participant account and the ways into the account (Accounts)
View and create payments	Menu item Payments and all pages under it, if the app Payments is switched on; adding and removing a payment obligation and Settle, also in the participant list and on the Participants page; global search for receipts (`€`); links to receipts. Without the role, the pages under Payments are blocked, even by their address.
Access to CMS	On its own, the role does not open the content management system (CMS) of the website; super admins get into the CMS (Content management system).
Global admin	Only with several tenants, assigned only by global admins. “Administers the installation and can switch into any tenant.” Unlocks Installation and the switch between tenants. Not part of this manual.

Rule	Content
Account without the account type Admin	Roles have no effect, not even through the API.

What each role sees

Area	Organizer	Admin	Super admin
Offers	own	all	all
Master data (main navigation)	yes	–	–
Files (main navigation)	yes	yes	yes
Participants	–	with role View and create participants	yes
Organizers, Accounts	–	yes	yes
Admin accounts	–	–	yes
Payments	–	with role View and create payments, if the app Payments is switched on	yes, if the app Payments is switched on
Seasons (sidebar)	–	yes	yes
Communication: newsletter, notifications, email problems; Web statistics, if set up	–	yes	yes
Communication: outbox; Compliance, Settings	–	–	yes
Website, CMS, batch icon (top bar)	–	yes	yes
Bell (top bar)	yes, with its exports, comments on its organizer profiles and replies to its messages	yes	yes
Opening the CMS	–	–	yes

Completion forms and export no longer have a menu item of their own: you reach the completion forms through a season (Seasons), the export through the export functions of the lists and the tab Export of a season. Details on menu items and top bar: Understanding the interface.

Content management system

In the CMS, super admins edit the website: pages, articles, files, forms and frequently asked questions. CMS in the top bar opens it.

Access

Rule	Content
Super admins	Open the CMS via CMS. With one tenant they edit everything there, with several tenants only the website of their tenant (With several tenants).
Other admins	See CMS in the top bar, but the call ends with “Access denied”, even with the role Access to CMS.
Global admins	Only with several tenants. They open the CMS of the tenant they have switched to, on its public domain. They have all permissions there, also for the websites of the other tenants. Every opening is recorded in the log of the tenant as Opened this tenant’s CMS. Without a public website: ““{name}” has no public website and therefore no CMS.”
Template Studio	Turned off in every installation by default

With several tenants

Area	Content
Areas of the CMS	Super admins see Pages, Articles, Files, Forms and FAQ; themes are missing.
Pages, Articles	The pages of the tenant's website. Super admins can edit its website root but not delete it, and they cannot create another website root.
Files	Only the folder `files/{abbreviation}` of the tenant. Files outside this folder remain usable in content but do not appear in the file manager.
Forms	The forms of the tenant. Super admins create forms and delete them; a new form belongs to their tenant. All kinds of form fields can be selected.
FAQ	The categories of the tenant and categories without a tenant whose page belongs to the tenant's website. Super admins create and delete categories; a new category belongs to their tenant.
Forms and categories without a tenant	If a super admin opens the CMS via CMS, fepli assigns to their tenant: categories whose page belongs to its website, and forms that show only articles of its website. Only global admins see all other forms and categories without a tenant.
Tenant	Field on forms and FAQ categories: the tenant the entry belongs to, or none. Only for global admins.
Content elements	Elements for unfiltered HTML and elements that embed content from elsewhere cannot be selected. Existing elements of these kinds remain but cannot be edited.
First call via CMS	If the website root of the website or the folder `files/{abbreviation}` is missing, fepli creates what is missing. A new website root is not published.

Permissions on offers

Permission	Organizer	Admin
Create an offer	during the editing phase of the season, if the season is not restricted to other organizers	yes
Edit an offer	as long as it is neither approved nor published and the editing phase is running	yes
Delete an offer	only without registrations and as long as it is neither approved nor published, while the editing phase is running	yes, except if registrations are on a paid receipt
Submit	yes, also outside the editing phase	yes
Approve, Publish and their withdrawals	only if the season allows Publish offers	yes
Cancel, Restore	yes, as long as the installation lets organizers edit the participant list (default), they may send the participant list’s newsletter and, if the season requires a consent, the confidentiality declaration is confirmed	yes
Complete	yes, with the completion form for organizers, if the season has one	yes; also fills in the organizers' form on their behalf, plus the form for the team
See the participant list	while Participant lists public is running; if the phase is set to Always active, until Access after the offer ends	yes
Participant list, if the season requests consent from the organizers (Seasons)	only after the confirmation	only after the confirmation
Allocate places	only if the season allows Allocate places, and only as long as they can see the participant list	yes
Transfer participants	with Registration via the website, as long as the installation lets organizers transfer (default) and they can see the participant list; the right applies to source and target offer, not with Participant list only	yes
Change the season and organizers of an offer	–	yes

Details: Offer status, Phases, Participant list, Completion forms. Publish offers and Allocate places are in the season under What organizers may do themselves (Seasons).

Access of organizers to offers

Location: Account > tab Organizers; offer > Edit > Access.

At the back the account of Sam Beispiel, in front the page **Access** of the canoe trip.

Level	Meaning
Member	Sees and changes everything in the organizer profile: master data, team and all offers, also future ones.
Offer access	Applies only to the listed offers; every further one must be shared individually. No access to master data, team or payments, no newsletter to the families of the offer, no inviting of further people. In the account it appears as “{count} offers”.
Editing and participant list	Offer access, shown on the page Access as “Edit + list”: “Change the offer, allocate places, see participants and contact details.” The permissions on offers of the organizers apply.
Participant list only	Offer access, shown on the page Access as “list only”: “View and print the list and the attendance list.”

Level	Granted under
Member	Account > tab Organizers > Assign membership; organizer profile > Team. Members invite under Master data > Team (Invite a member to the team).
Offer access with Editing and participant list	Account > tab Organizers > Share offers
Editing and participant list, Participant list only	Offer > Edit > Access > Invite a person, for admins and members (Invite a person to a single offer)