Role-Based Access for a Small Team: Owner, Manager, Gate

Most small water plants handle access one of two ways: everyone shares the owner's login, or the owner does everything themselves because nobody else is trusted with the whole system. Neither is really access control, it's a workaround. A plant with more than one or two people recording activity usually needs something in between.

Why "everyone has the same login" breaks down

Shared logins make it impossible to know who actually entered a given transaction. When a number looks wrong later, "who did this" is often the first useful question, and a shared login has no answer. It also means a gate operator checking dispatch has the same access as whoever manages billing, which is more exposure than the job requires, for either person.

Three roles, matched to three real jobs

An Owner role covers everything: billing, team management, organisation settings, cancellations. A Manager role covers full daily operations, purchases, production, sales, payments, master data, reports, but not billing or team changes. A Gate role is deliberately narrow: the dashboard, sales and stock, and nothing else. These map to three genuinely different jobs at a plant, not three arbitrary permission tiers.

Why the Gate role being narrow is the point, not a limitation

It's tempting to think a gate operator should see more "just in case." In practice, the opposite is more useful: a role that only shows what the job needs is easier to hand to a new hire on day one, and it means a compromised or careless gate login can't touch billing, team settings, or anything beyond confirming what's leaving the plant.

What Managers can and can't do

A Manager running day-to-day operations doesn't need, and generally shouldn't have, the ability to change billing or add and remove team members. Keeping those two things reserved for the Owner role isn't about distrust, it's about keeping the two highest-consequence categories of change, money and access itself, in one place.

Activity history is what makes the roles work

None of this matters much without a record of who did what. Cancellations and reversals attributed to the person who made them are what turn "who changed this" from a guess into an answer, and that record only means something if the roles behind it were meaningful to begin with.

See how Owner, Manager and Gate roles work in practice