Roles & Permissions Matrix
Tip: Managers and other site-scoped roles only see data for their assigned sites. Admins and Coordinators have organization-wide visibility.
Tellus uses role-based access control to ensure every user sees the right data and has access to the right actions. This page shows what each of the eight system roles can do across every module.
Role Overview
| Role | Scope | Description |
|---|---|---|
| Admin | Organization-wide | Full access to all features, users, billing, and settings |
| Manager | Site-level | Manages inventory, reviews imports, generates reports for their assigned sites |
| Coordinator | Organization-wide | Program Coordinator designated under OSHA's HazCom Standard — manages the compliance program |
| Trainer | Organization-wide | Creates and manages training courses, assigns training, reviews performance |
| Employee | Site-level | Views inventory, accesses SDSs, completes assigned training |
| Viewer | Site-level | Read-only access to inventory and documents — no editing capabilities |
| Contractor | Site-level | Limited access to chemicals and SDSs at assigned sites, completes required training |
| Consultant | Multi-company | Manages multiple client organizations from a single account |
AdminHQ Permissions
| Feature | Admin | Manager | Coordinator | Trainer | Employee | Viewer | Contractor | Consultant |
|---|---|---|---|---|---|---|---|---|
| Company settings | Yes | — | — | — | — | — | — | Yes |
| Sites & locations | Yes | Own site | View only | — | — | — | — | Yes |
| User management | Yes | — | — | — | — | — | — | Yes |
| Role management | Yes | — | — | — | — | — | — | Yes |
| Invite users | Yes | — | — | — | — | — | — | Yes |
| Billing & subscription | Yes | — | — | — | — | — | — | — |
| Branding & customization | Yes | — | — | — | — | — | — | — |
| Security settings | Yes | — | — | — | — | — | — | — |
| Audit log | Yes | — | View only | — | — | — | — | Yes |
| Onboarding wizard | Yes | — | — | — | — | — | — | Yes |
ChemIQ Permissions
| Feature | Admin | Manager | Coordinator | Trainer | Employee | Viewer | Contractor | Consultant |
|---|---|---|---|---|---|---|---|---|
| View inventory | Yes | Own site | Yes | View only | Own site | Own site | Own site | Yes |
| Add/edit chemicals | Yes | Own site | Yes | — | — | — | — | Yes |
| Remove chemicals | Yes | Own site | Yes | — | — | — | — | Yes |
| Upload SDS | Yes | Own site | Yes | — | — | — | — | Yes |
| Bulk upload SDS (ZIP) | Yes | Own site | Yes | — | — | — | — | Yes |
| Quick Import (photo/barcode) | Yes | Own site | Yes | — | — | — | — | Yes |
| Review imports | Yes | Own site | Yes | — | — | — | — | Yes |
| Product catalog | Yes | Own site | Yes | View only | View only | View only | — | Yes |
| Print labels (GHS/NFPA/HMIS) | Yes | Own site | Yes | — | View only | View only | — | Yes |
| Site quantities | Yes | Own site | Yes | — | View only | View only | — | Yes |
| Tier II / Fire Marshal reports | Yes | Own site | Yes | — | — | — | — | Yes |
| CAS regulatory linking | Yes | View only | Yes | — | View only | View only | — | Yes |
| Compliance dashboard | Yes | Own site | Yes | — | — | — | — | Yes |
| EPA label management | Yes | Own site | Yes | — | — | — | — | Yes |
Plan Builder Permissions
| Feature | Admin | Manager | Coordinator | Trainer | Employee | Viewer | Contractor | Consultant |
|---|---|---|---|---|---|---|---|---|
| View plans | Yes | Own site | Yes | View only | View only | View only | — | Yes |
| Create plans | Yes | — | Yes | — | — | — | — | Yes |
| Edit plans | Yes | — | Yes | — | — | — | — | Yes |
| Approve plans | Yes | — | Yes | — | — | — | — | Yes |
| Publish plans | Yes | — | Yes | — | — | — | — | Yes |
| Archive plans | Yes | — | Yes | — | — | — | — | Yes |
| Download PDF | Yes | Own site | Yes | View only | View only | View only | — | Yes |
| AI plan generation | Yes | — | Yes | — | — | — | — | Yes |
SafePath Permissions
| Feature | Admin | Manager | Coordinator | Trainer | Employee | Viewer | Contractor | Consultant |
|---|---|---|---|---|---|---|---|---|
| Training dashboard (admin view) | Yes | Own site | Yes | Yes | — | — | — | Yes |
| Training dashboard (employee view) | — | — | — | — | Yes | — | Yes | — |
| Create courses | Yes | — | Yes | Yes | — | — | — | Yes |
| Edit courses | Yes | — | Yes | Yes | — | — | — | Yes |
| Delete courses | Yes | — | Yes | — | — | — | — | Yes |
| Assign training | Yes | Own site | Yes | Yes | — | — | — | Yes |
| Complete training | — | — | — | — | Yes | — | Yes | — |
| View employee progress | Yes | Own site | Yes | Yes | — | — | — | Yes |
| Certification management | Yes | Own site | Yes | Yes | Own | — | Own | Yes |
| Training matrix | Yes | Own site | Yes | Yes | — | — | — | Yes |
| Training automation rules | Yes | — | Yes | Yes | — | — | — | Yes |
| AI course generation (Pro) | Yes | — | Yes | Yes | — | — | — | Yes |
| Training reports & exports | Yes | Own site | Yes | Yes | — | — | — | Yes |
Insights Permissions
| Feature | Admin | Manager | Coordinator | Trainer | Employee | Viewer | Contractor | Consultant |
|---|---|---|---|---|---|---|---|---|
| Compliance Center | Yes | Own site | Yes | — | — | — | — | Yes |
| Chemical Insights | Yes | Own site | Yes | — | — | — | — | Yes |
| Training Insights | Yes | Own site | Yes | Yes | — | — | — | Yes |
| Plan Insights | Yes | — | Yes | — | — | — | — | Yes |
| User Insights | Yes | — | — | — | — | — | — | — |
| EHS Agent (Pro) | Yes | — | Yes | — | — | — | — | Yes |
| Export reports | Yes | Own site | Yes | Yes | — | — | — | Yes |
Key Concepts
Site-Scoped Access
Managers, Employees, Viewers, and Contractors are assigned to specific sites. They can only see and interact with data at their assigned sites. An employee assigned to "Warehouse A" cannot see the chemical inventory at "Warehouse B."
Admins can assign users to multiple sites, giving them access to data across those locations.
Organization-Wide Access
Admins, Coordinators, Trainers, and Consultants see data across the entire organization (or, for Consultants, across all their client organizations). This is necessary for their roles — a Program Coordinator needs to oversee the entire compliance program, not just one site.
The Consultant Role
Consultants are EHS professionals who manage multiple client organizations. They can switch between companies using the company switcher in the header. Each company's data is completely isolated — a Consultant with access to Company A and Company B cannot mix data between them.
Within each company, a Consultant has permissions equivalent to an Admin for the modules they've been granted access to.
Custom Roles (Pro)
On Pro plans, Admins can create custom roles with specific permission sets tailored to their organization. For example, you might create a "Lab Manager" role that has full ChemIQ access but read-only access to Plan Builder.
Related
- Users & Roles — How to manage users and assign roles
- Subscription Tiers — Feature availability by plan