People permissions reference
Markular controls access to People by permission, not by job title. Your organisation's roles map to broad permission levels, while profile access can give someone a focused view of selected people and fields.
Broad People permissions
Each level includes everything the level below it can do.
| Permission | Who typically has it | What it allows |
|---|---|---|
| View personnel | Coordinators, planners | Open the directory, org chart, competency overview, and reports. Read only. |
| Manage personnel | Personnel managers | Everything in View, plus add and edit people, positions, absence, departments, locations, and review self-service submissions. |
| Administer personnel | Personnel administrators | Everything in Manage, plus role access control, country restrictions, and bulk personnel import. |
What each level gates
| Area | View | Manage | Administer |
|---|---|---|---|
| Directory, Organization, Insights | ✅ | ✅ | ✅ |
| Add and edit people | ✅ | ✅ | |
| Positions, departments, locations | ✅ | ✅ | |
| Review submissions | ✅ | ✅ | |
| Certificate-expiry notifications | ✅ | ✅ | |
| Access Control (Legacy) | ✅ | ||
| Country restrictions | ✅ | ||
| Bulk personnel import | ✅ |
Focused profile access
Focused permissions sit alongside the broad levels. They do not form another tier in the View, Manage and Administer hierarchy.
| Permission | Who typically uses it | What it allows |
|---|---|---|
| View shared profiles | Supervisors, project leads, temporary coordinators | Open a focused Directory and view only named people and approved profile fields. A People access role can add a focused Insights overview and, separately, export. No broad directory or editing. |
| Manage profile access | People access administrators | Create information profiles and preview, grant, inspect or revoke limited access. This permission does not by itself open the personnel directory. |
An active limited grant supplies View shared profiles to its recipient. The grant controls the people, fields and time period. If several grants apply, Markular combines them.
An information profile can also include area permissions:
| Area permission | Additional access |
|---|---|
| Courses and competencies | Qualification information for the people covered by the role |
| Course and competency documentation | Documentation attached to those qualifications |
| Personnel documents | Document overview and authorized document previews for covered people |
| People insights | Workforce overview for the role's people and approved fields |
| Export People insights | A separately authorized export of the same bounded data |
How pages appear
People resolves the signed-in user's effective access on the server. Navigation only shows surfaces allowed by that decision. A limited user can therefore see Directory without Workforce overview, or Document overview without export, depending on the permissions included in the role. Established organization, competency workspace, People data and administration pages remain hidden unless the user has the corresponding broad permission.
Direct links follow the same decision as the menu. Hiding a menu item is not the security control; each API request applies the person, field and operation boundary again.
Important access rules
- Broad access wins. A person with View personnel can use the full directory within their country restrictions, even if they also have a limited grant.
- Limited access is additive. It cannot be used to hide fields from a broad role.
- Focused Insights uses the same people and field boundary as the active grant. Export must be explicitly enabled in the same People access role as insight viewing.
- Country restrictions apply outside both models and can further reduce which personnel are available.
- A revoked or expired grant stops supplying access immediately unless another active grant or broad role still allows it.