---
title: "How to manage users, roles, and permissions?"
slug: "1723487559"
tags: ["Roles", "Settings"]
updated: 2026-07-22T14:50:19Z
published: 2026-07-22T14:51:04Z
canonical: "help.ila.cegid.com/1723487559"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.ila.cegid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to manage users, roles, and permissions?

- [x] PT
- [x] ES

---

To ensure the platform is used correctly and that users have access to the appropriate features, they must be invited to subscribe and assigned to roles that match their responsibilities.

> [!NOTE]
> A user can have **more than one role** at the same time.

---

## Available user roles

Each role provides different permissions and access levels within the platform. Assigning the correct roles allows you to control which operations each user can view, create, edit, or manage.

The following roles are currently available:

**Administrator**

The **administrator** role allows you to:

- Access all features available in each product line;
- Manage platform users.

**Note**: Only the subscriber can invite new users.

**Technician**

The **technician** role allows you to:

- View work orders you have created or that have been assigned to you;
- Create work orders;
- Delete work orders you have created that have no associated relationships;
- Record:
  - Labor;
  - Consumption;
  - Miscellaneous costs;
  - Task verifications;
- Create failures in work orders assigned to you;
- Create requisitions;
- Edit and delete requisitions you have created, without associated relationships.

**Requester**

The **requester** role allows you to:

- Create requests;
- Edit and delete requests you have created, provided they have no associated relationships.

**Integrator**

The **Integrator** role can only be assigned to subscriptions on the **Universe** line that have the **Valuekeep Integration Hub** add-on, and it cannot be cloned.

**Request manager**

The **request manager** role allows you to::

- Create requests;
- Edit and delete requests you have created, provided they have no associated relationships;
- View requests you have created and requests for assets within your access levels;
- Change requests to final status, even if you didn't create them.

**Work manager**

The **work manager** role allows you to::

- View or edit work orders for the workshops where you are a manager;
- View and edit work orders for assets included in your access levels;
- Record the following for assets to which you have access:
  - Verifications;
  - Costs;
  - Measurement values;
  - Downtime;
  - Failures;
- Manage work order requests for the workshops where you are a manager;
- Create work orders only for:
  - Assets to which you have access;
  - Workshops where you are a manager;
- View preventive maintenance events for the workshops where you are a manager;
- View requests according to the rules defined in the request type and in the associated workshops.

**Read-only**

The **read-only** role allows you to::

- View platform information (work orders, preventive maintenance tasks, requests, etc.);
- Add fields;
- Edit list filters.

With this role, you cannot:

- Create records;
- Edit records;
- Delete records.

**Notes**:

- This role cannot be selected from the menu;
- The subscriber cannot have this role.

> [!WARNING]
> The **failure** functionality is only available on the **Galaxy** and **Universe** lines.

---

## Invite users

The invitation of users, as well as the assignment of roles to them, must be carried out by the administrator or the subscription manager.

To do this, follow these steps:

1. Access the **personal area** via the icon in the upper-right corner;
2. Click on **Users** to open the user list;
3. Click on **Actions**, then on **Invite User**;
4. Fill in the fields with the user’s information;
5. Select the **roles** you want to assign to the user;
6. Click **Save**.

After the invitation is sent:

- The user receives an email to access the platform;
- They can create an account or log in with an existing account.

---

## First time accessing the platform

After receiving the invitation by email, the user should:

1. Open the **invitation**;
2. Click **Accept**;
3. Complete the account registration;
4. Log in to the platform.

---

## Install and sign in to the mobile app

After completing registration, the user can install the mobile app.

To do this, you must:

1. Access the device’s App Center;
2. Search for the **Valuekeep Technician** app;
3. Install the app;
4. Open the app;
5. Sign in using the same credentials you used to register.

---

## Change user roles

To change the roles associated with a user, follow these steps:

1. Access **Settings | System | Users**;
2. Select the desired **user**;
3. Click **View** in the record row;
4. The **user's file** is displayed;
5. Click **Edit**;
6. Select the desired **roles**;
7. Click **Save**.

---

## Remove accesses

To remove a user’s invitation to Valuekeep CMMS, follow these steps:

1. Access the personal area by clicking the icon in the upper-right corner;
2. Select **Users**, which will open a new page;
3. Click on the **user** whose access you want to remove;
4. Click the **delete** icon (trash can);

When user access is revoked:

- The employees associated with the user are removed;
- Their access levels and workshops will be removed.