Roles & Permissions
===================

ChargeSol uses role-based access control (RBAC) with seven system roles derived from the business process actors. Each user is assigned exactly one role.

Role Descriptions
-----------------

OEM
~~~

**Who**: Representatives of Original Equipment Manufacturers (e.g., Tata Motors, MG, Ather).

**What they do**: Submit installation leads, view their own leads' progress, receive closure packs and periodic reports.

**What they cannot do**: Manage other users, schedule surveys/installations, or access operational details of other OEMs.

Customer
~~~~~~~~

**Who**: End users who need an EV charger installed.

**What they do**: Upload documents (electricity bill, location photos), confirm availability for surveys/installations, view their own lead status.

**What they cannot do**: Access system beyond their own lead. In v1, customer interaction is primarily phone/SMS-based with limited portal access.

Central Ops
~~~~~~~~~~~

**Who**: Operations coordinators who orchestrate the entire workflow.

**What they do**: Everything operational — log leads, schedule surveys, assign teams, review reports, plan installations, handle emergencies, mark jobs payable, manage users and teams.

**What they cannot do**: Process financial payments (Finance role), compile OEM reports (OEM Reporting role).

Field Team
~~~~~~~~~~

**Who**: On-ground survey and installation teams.

**What they do**: View assigned surveys/installations, update assignment status, submit reports with media, log calls, report emergencies.

**What they cannot do**: Schedule work, assign teams, review reports, or access unassigned jobs.

Procurement
~~~~~~~~~~~

**Who**: Material and inventory managers.

**What they do**: Manage material catalog, track stock levels, allocate materials, create procurement requests, manage vendors.

**What they cannot do**: Schedule surveys/installations, process payments, or manage users.

Finance
~~~~~~~

**Who**: Payment processors.

**What they do**: Process vendor payments, release team payouts, manage payment schedules, view financial summaries.

**What they cannot do**: Modify operational data (leads, surveys, installations) or manage users.

OEM Reporting
~~~~~~~~~~~~~

**Who**: Report compilers.

**What they do**: Compile closure packs, generate weekly/monthly reports, submit reports to OEMs, track OEM acknowledgment.

**What they cannot do**: Modify operational data or manage users.

.. toctree::
   :maxdepth: 1
   :hidden:

   permissions_matrix