ForemanFOREMAN

How the assistant respects permissions

The assistant can only do what your role allows — the same permission rules that govern the app govern the assistant.

The assistant is a faster way to do the work you're already allowed to do — never a way to do more.

It acts as you

When the assistant makes a change, it's acting on your behalf, within your access:

  • It only sees projects and data you can see.
  • It can only create or edit what your role permits.
  • Clients and vendors get an assistant scoped to their limited access too.

If your role can't create invoices, the assistant can't either when you ask — that ability simply isn't available to it.

Areas it stays out of by design

A few surfaces are off-limits to the assistant regardless of role — handle these directly:

  • Billing and subscription
  • Team, members, and roles
  • Organization settings
  • The plan/takeoff canvas and file markup (hands-on visual tools)

Note

Because the assistant inherits your permissions, you can hand it to anyone on your team safely — it can never exceed what their role already allows.