Skip to main content

Roles & Permissions Matrix

Tip: Managers and other site-scoped roles only see data for their assigned sites. Admins and Coordinators have organization-wide visibility.

Tellus uses role-based access control to ensure every user sees the right data and has access to the right actions. This page shows what each of the eight system roles can do across every module.


Role Overview​

RoleScopeDescription
AdminOrganization-wideFull access to all features, users, billing, and settings
ManagerSite-levelManages inventory, reviews imports, generates reports for their assigned sites
CoordinatorOrganization-wideProgram Coordinator designated under OSHA's HazCom Standard — manages the compliance program
TrainerOrganization-wideCreates and manages training courses, assigns training, reviews performance
EmployeeSite-levelViews inventory, accesses SDSs, completes assigned training
ViewerSite-levelRead-only access to inventory and documents — no editing capabilities
ContractorSite-levelLimited access to chemicals and SDSs at assigned sites, completes required training
ConsultantMulti-companyManages multiple client organizations from a single account

AdminHQ Permissions​

FeatureAdminManagerCoordinatorTrainerEmployeeViewerContractorConsultant
Company settingsYes——————Yes
Sites & locationsYesOwn siteView only————Yes
User managementYes——————Yes
Role managementYes——————Yes
Invite usersYes——————Yes
Billing & subscriptionYes———————
Branding & customizationYes———————
Security settingsYes———————
Audit logYes—View only————Yes
Onboarding wizardYes——————Yes

ChemIQ Permissions​

FeatureAdminManagerCoordinatorTrainerEmployeeViewerContractorConsultant
View inventoryYesOwn siteYesView onlyOwn siteOwn siteOwn siteYes
Add/edit chemicalsYesOwn siteYes————Yes
Remove chemicalsYesOwn siteYes————Yes
Upload SDSYesOwn siteYes————Yes
Bulk upload SDS (ZIP)YesOwn siteYes————Yes
Quick Import (photo/barcode)YesOwn siteYes————Yes
Review importsYesOwn siteYes————Yes
Product catalogYesOwn siteYesView onlyView onlyView only—Yes
Print labels (GHS/NFPA/HMIS)YesOwn siteYes—View onlyView only—Yes
Site quantitiesYesOwn siteYes—View onlyView only—Yes
Tier II / Fire Marshal reportsYesOwn siteYes————Yes
CAS regulatory linkingYesView onlyYes—View onlyView only—Yes
Compliance dashboardYesOwn siteYes————Yes
EPA label managementYesOwn siteYes————Yes

Plan Builder Permissions​

FeatureAdminManagerCoordinatorTrainerEmployeeViewerContractorConsultant
View plansYesOwn siteYesView onlyView onlyView only—Yes
Create plansYes—Yes————Yes
Edit plansYes—Yes————Yes
Approve plansYes—Yes————Yes
Publish plansYes—Yes————Yes
Archive plansYes—Yes————Yes
Download PDFYesOwn siteYesView onlyView onlyView only—Yes
AI plan generationYes—Yes————Yes

SafePath Permissions​

FeatureAdminManagerCoordinatorTrainerEmployeeViewerContractorConsultant
Training dashboard (admin view)YesOwn siteYesYes———Yes
Training dashboard (employee view)————Yes—Yes—
Create coursesYes—YesYes———Yes
Edit coursesYes—YesYes———Yes
Delete coursesYes—Yes————Yes
Assign trainingYesOwn siteYesYes———Yes
Complete training————Yes—Yes—
View employee progressYesOwn siteYesYes———Yes
Certification managementYesOwn siteYesYesOwn—OwnYes
Training matrixYesOwn siteYesYes———Yes
Training automation rulesYes—YesYes———Yes
AI course generation (Pro)Yes—YesYes———Yes
Training reports & exportsYesOwn siteYesYes———Yes

Insights Permissions​

FeatureAdminManagerCoordinatorTrainerEmployeeViewerContractorConsultant
Compliance CenterYesOwn siteYes————Yes
Chemical InsightsYesOwn siteYes————Yes
Training InsightsYesOwn siteYesYes———Yes
Plan InsightsYes—Yes————Yes
User InsightsYes———————
EHS Agent (Pro)Yes—Yes————Yes
Export reportsYesOwn siteYesYes———Yes

Key Concepts​

Site-Scoped Access​

Managers, Employees, Viewers, and Contractors are assigned to specific sites. They can only see and interact with data at their assigned sites. An employee assigned to "Warehouse A" cannot see the chemical inventory at "Warehouse B."

Admins can assign users to multiple sites, giving them access to data across those locations.

Organization-Wide Access​

Admins, Coordinators, Trainers, and Consultants see data across the entire organization (or, for Consultants, across all their client organizations). This is necessary for their roles — a Program Coordinator needs to oversee the entire compliance program, not just one site.

The Consultant Role​

Consultants are EHS professionals who manage multiple client organizations. They can switch between companies using the company switcher in the header. Each company's data is completely isolated — a Consultant with access to Company A and Company B cannot mix data between them.

Within each company, a Consultant has permissions equivalent to an Admin for the modules they've been granted access to.

Custom Roles (Pro)​

On Pro plans, Admins can create custom roles with specific permission sets tailored to their organization. For example, you might create a "Lab Manager" role that has full ChemIQ access but read-only access to Plan Builder.