Skip to main content

Roles & Permissions Matrix

Tip: Managers and other site-scoped roles only see data for their assigned sites. Admins and Coordinators have organization-wide visibility.

Tellus uses role-based access control to ensure every user sees the right data and has access to the right actions. This page shows what each of the eight system roles can do across every module.


Role Overview

RoleScopeDescription
AdminOrganization-wideFull access to all features, users, billing, and settings
ManagerSite-levelManages inventory, reviews imports, generates reports for their assigned sites
CoordinatorOrganization-wideProgram Coordinator designated under OSHA's HazCom Standard — manages the compliance program
TrainerOrganization-wideCreates and manages training courses, assigns training, reviews performance
EmployeeSite-levelViews inventory, accesses SDSs, completes assigned training
ViewerSite-levelRead-only access to inventory and documents — no editing capabilities
ContractorSite-levelLimited access to chemicals and SDSs at assigned sites, completes required training
ConsultantMulti-companyManages multiple client organizations from a single account

AdminHQ Permissions

FeatureAdminManagerCoordinatorTrainerEmployeeViewerContractorConsultant
Company settingsYesYes
Sites & locationsYesOwn siteView onlyYes
User managementYesYes
Role managementYesYes
Invite usersYesYes
Billing & subscriptionYes
Branding & customizationYes
Security settingsYes
Audit logYesView onlyYes
Onboarding wizardYesYes

ChemIQ Permissions

FeatureAdminManagerCoordinatorTrainerEmployeeViewerContractorConsultant
View inventoryYesOwn siteYesView onlyOwn siteOwn siteOwn siteYes
Add/edit chemicalsYesOwn siteYesYes
Remove chemicalsYesOwn siteYesYes
Upload SDSYesOwn siteYesYes
Bulk upload SDS (ZIP)YesOwn siteYesYes
Quick Import (photo/barcode)YesOwn siteYesYes
Review importsYesOwn siteYesYes
Product catalogYesOwn siteYesView onlyView onlyView onlyYes
Print labels (GHS/NFPA/HMIS)YesOwn siteYesView onlyView onlyYes
Site quantitiesYesOwn siteYesView onlyView onlyYes
Tier II / Fire Marshal reportsYesOwn siteYesYes
CAS regulatory linkingYesView onlyYesView onlyView onlyYes
Compliance dashboardYesOwn siteYesYes
EPA label managementYesOwn siteYesYes

Plan Builder Permissions

FeatureAdminManagerCoordinatorTrainerEmployeeViewerContractorConsultant
View plansYesOwn siteYesView onlyView onlyView onlyYes
Create plansYesYesYes
Edit plansYesYesYes
Approve plansYesYesYes
Publish plansYesYesYes
Archive plansYesYesYes
Download PDFYesOwn siteYesView onlyView onlyView onlyYes
AI plan generationYesYesYes

SafePath Permissions

FeatureAdminManagerCoordinatorTrainerEmployeeViewerContractorConsultant
Training dashboard (admin view)YesOwn siteYesYesYes
Training dashboard (employee view)YesYes
Create coursesYesYesYesYes
Edit coursesYesYesYesYes
Delete coursesYesYesYes
Assign trainingYesOwn siteYesYesYes
Complete trainingYesYes
View employee progressYesOwn siteYesYesYes
Certification managementYesOwn siteYesYesOwnOwnYes
Training matrixYesOwn siteYesYesYes
Training automation rulesYesYesYesYes
AI course generation (Pro)YesYesYesYes
Training reports & exportsYesOwn siteYesYesYes

Insights Permissions

FeatureAdminManagerCoordinatorTrainerEmployeeViewerContractorConsultant
Compliance CenterYesOwn siteYesYes
Chemical InsightsYesOwn siteYesYes
Training InsightsYesOwn siteYesYesYes
Plan InsightsYesYesYes
User InsightsYes
EHS Agent (Pro)YesYesYes
Export reportsYesOwn siteYesYesYes

Key Concepts

Site-Scoped Access

Managers, Employees, Viewers, and Contractors are assigned to specific sites. They can only see and interact with data at their assigned sites. An employee assigned to "Warehouse A" cannot see the chemical inventory at "Warehouse B."

Admins can assign users to multiple sites, giving them access to data across those locations.

Organization-Wide Access

Admins, Coordinators, Trainers, and Consultants see data across the entire organization (or, for Consultants, across all their client organizations). This is necessary for their roles — a Program Coordinator needs to oversee the entire compliance program, not just one site.

The Consultant Role

Consultants are EHS professionals who manage multiple client organizations. They can switch between companies using the company switcher in the header. Each company's data is completely isolated — a Consultant with access to Company A and Company B cannot mix data between them.

Within each company, a Consultant has permissions equivalent to an Admin for the modules they've been granted access to.

Custom Roles (Pro)

On Pro plans, Admins can create custom roles with specific permission sets tailored to their organization. For example, you might create a "Lab Manager" role that has full ChemIQ access but read-only access to Plan Builder.