Security and permissions

Everyone sees exactly what their job needs

Suprata controls who can see and do what with a fine-grained permission catalog, built-in and custom roles, and a history on every record. Dashboards, reports, AI and exports all follow the same permissions.

Start tonight Book a demo
Fine-grained permissionsBuilt-in and custom rolesAudit trails on every record
Suprata Manage Users screen listing team members with their roles and teams

Suprata is a versatile workflow and business intelligence platform that delivers the power of custom software with ease and affordability. Buy Suprata Suite tonight and be set up in minutes. Then shape it as far as your business logic, intelligence and workflows need.

The controls

Built-in controls you can see and test

Every item on this page is documented in the help center. Follow the links to see exactly how each one works.

A fine-grained permission catalog

Separate permissions for settings, money, operations, customer data, time, pricing, reports and communications. Grant exactly what each job needs.

The permission catalog

Export gated by permission

The customer list export is off for every role by default. Only roles you choose can download customer data.

The permission catalog

Your own subdomain

Every account lives at its own address on suprata.com, including its own API address.

The Suprata API

API keys behind a permission

Only people with the Manage API Keys permission can create keys. Each key has a fixed scope and can be revoked instantly.

The Suprata API

Off every device at once

Deactivate a user and they are signed out on every device straight away, and cannot sign in again.

Giving a tech limited access

The permission catalog

Separate gates for the things that matter

Money out, customer data and settings each have their own permission, so a technician can do their whole job without seeing prices, payment methods or other technicians’ work.

AreaWhat is controlled separately
Settings and adminCompany settings, user administration and integrations, each its own ownership-level permission.
MoneyCreate invoices, edit invoices, apply payments, issue refunds, apply credits and sync to QuickBooks are separate gates.
OperationsCreate, edit and delete jobs, change job status, schedule appointments, and See All Jobs versus See Own Jobs for technicians.
Business unitsSwitch business units, and view all business units for company-wide totals.
Customer dataCreate, edit and delete accounts, see saved payment methods, see full history and export the customer list.
Time and payrollPunch in and out, administer the time clock, and see the audit of time-entry edits.
Pricing and inventoryEdit the price list, import price books, adjust stock and see item cost.
Reports and communicationsPermission per report, sending email and texts, editing templates and reading inbound messages.

Read the full permission catalog

Roles

Seven roles to start, as many as you need

Suprata ships with seed roles for common shapes of organization. Copy one to make a custom role, and preview it before anyone uses it.

  • Seed roles: Super Administrator, Administrator, Technician, Dispatch, Accounts Receivable, Read-Only, Payroll.
  • Custom roles by copying, so each starts from a known-good set.
  • A quarterly role review keeps access from drifting. The help center gives the checklist.
  • Field techs get limited access: their own jobs, no pricing and no customer payment data.

Help articles:Built-in roles explainedWhen to create a custom role (and when not)Auditing roles periodicallyGiving a tech limited access

A time clock audit on a tablet showing each punch and every edit to it
Time-entry edits keep a history that cannot be changed or deleted.

Audit trails

Every important record remembers its history

When someone asks “who approved this?” two years from now, the answer is on the record.

  • Invoices keep their history, and reversals require a reason.
  • Payment corrections keep the trail intact and never touch your processor.
  • Time entries keep before and after values, and those entries cannot be edited or deleted.
  • Approvals, plan changes, waitlists and tickets each record who decided what, and when.

Help articles:Closing, reversing, and reactivating invoicesDocument approvalsChanging a Guest's Plan Mid-StayCorrecting time entries

An audit trail listing every staff action with time, person, role, action, record and a hash chain
A tamper-evident audit trail in Suprata Registry, a solution built on the same platform.

Privacy built in

Data that stays where it belongs

Mailbox privacy

When staff connect their mailboxes, you decide mailbox by mailbox who else can read those emails.

Who can read whose email

Answering a security questionnaire? Our team can walk your reviewers through how each control works. Call 888-494-4335 or email hello@suprata.com. Public agencies can also start at buying for the public sector.

From the help center

Read exactly how it works

Every capability on this page is documented in the Suprata help center. Start with these articles.

Users, Roles & Permissions The permission catalog A tour of the major permissions in Suprata: what each one actually controls, the ones people commonly mis-grant, and how to think about them when... Read the article Users, Roles & Permissions Built-in roles explained Suprata ships with a small set of seed roles meant to cover common service-business shapes. Here's what each one is for, the permissions it grants... Read the article Users, Roles & Permissions When to create a custom role (and when not) Custom roles are powerful but easy to overuse. Three signals tell you when a custom role is the right answer, and the cloning pattern that keeps your... Read the article Users, Roles & Permissions Auditing roles periodically Roles drift. Once a quarter, walk through the role catalog with fresh eyes — what to look for, what to clean up, and the questions that surface real... Read the article Users, Roles & Permissions Giving a tech limited access Field techs need just enough access to do their work — and not access to pricing, customer payment data, or other techs' jobs. Here's the right... Read the article Users, Roles & Permissions Who can read whose email When your staff connect their mailboxes, their emails with customers show up on the customer's account and in Communication. Decide mailbox by... Read the article Developer API The Suprata API REST over HTTPS, JSON, key-authenticated. Base URL, scopes, pagination and polling, rate limits, webhooks, error codes, and the one non-obvious... Read the article Settings & Configuration Business units Business units split one company into locations or departments, such as six shops, or Residential and Commercial. Each person works in one unit at a... Read the article Payments & Processors Saved payment methods — when to use them (and when not) Storing a customer's card or bank account on file unlocks subscription billing, autopay, and one-click checkout — but it also concentrates risk and... Read the article

More of the platform

Keep exploring the platform

Integrations A REST API, webhooks, an event feed and accounting sync.
Customer portal A passwordless, branded portal to pay, sign, upload and book.
The power of custom software Your rules, workflows and reports, built on a platform that already works.

Ready when you are

Give every person the right access, starting tonight.

Suprata is a versatile workflow and business intelligence platform that delivers the power of custom software with ease and affordability. Start with Suprata Suite on your own tonight, or let our team shape it around the way you work.

Start tonight Book a demo
Or call 888-494-4335 hello@suprata.com