Manage Roles and Permissions
For: Admin | Tier: All plans (editing on Pro)
Every user in Tellus has a role, and every role has a set of permissions that control what that person can see and do. This guide shows you how to view those permissions and (on Pro plans) customize them.
View Role Permissions
- Navigate to AdminHQ from the main menu
- Click People in the sidebar
- Select the Roles & Permissions tab
- You'll see all 8 system roles listed:
- Administrator — Full access to everything
- Manager — Site-level inventory and team management
- Program Coordinator — HazCom plans and compliance oversight
- Trainer — Course creation and training delivery
- Employee — View chemicals, complete training
- Viewer — Read-only access
- Contractor — Limited site-scoped access
- Consultant — Multi-company admin access
- Click any role to expand it and see its assigned permissions
- Permissions are grouped by module (AdminHQ, ChemIQ, SafePath, Plan Builder, etc.)
- Use the search bar to filter permissions by name or module
Change a User's Role
- Go to AdminHQ > People > Users tab
- Click the user whose role you want to change
- On their profile page, find the Role field
- Select a new role from the dropdown
- Click
Save
The change takes effect immediately. The user will see their updated access the next time they navigate or refresh.
Edit Role Permissions (Pro)
On the Pro plan, you can customize what each role can do:
- Go to AdminHQ > People > Roles & Permissions tab
- Click a role to expand it
- Click
Edit Permissions - You'll see all available permissions organized by module, with checkboxes
- Check or uncheck individual permissions, or use
Select All/Deselect Allper module - A badge shows when you have unsaved changes
- Click
Saveto apply your changes, orCancelto discard
Important: The Administrator role always has all permissions and cannot be modified. This ensures there's always at least one role with full access to your account.
Tips
- Start with the defaults — The built-in roles are designed to match common EHS team structures. Customize only when the defaults don't fit.
- Test changes carefully — When editing permissions on Pro, consider the impact before removing access. A Manager who loses inventory editing permission won't be able to update chemical quantities.
- Use site-scoped roles for nuance — Instead of creating a custom permission set, you can assign different roles at different sites. For example, give someone the Manager role at their primary site and Employee role elsewhere.
Related
- Invite a User — Assign a role when inviting someone
- Users & Roles — Full reference for all 8 roles and their capabilities