Grant Granular Permissions in a Permission Template
Objective
To grant granular permissions to users who are assigned to a permission template to allow those users to perform specific tasks on supported the tools (e.g., Admin, Bidding, Commitments, Directory, Documents, and Punch List).
Background
In Procore, Role-Based Permissions (RBP) are used to manage user access to different Procore tools. Access for each role is defined in a permission template. By default, Procore provides its client's with several role-based permission templates (see What is a permission template? and What are the default permission templates in Procore?).
Things to Consider
- Required User Permissions:
- To grant granular permissions for a role on permission template, 'Admin' level permission on the company's Directory tool.
- Supported Platforms:
- Procore Web
- Procore Drive
- Supported Procore Tools:
- See Which Procore tools support Granular Permissions?
Note: If your company has enabled the ERP Integrations tool (see Request to Enable the ERP Integrations Tool), all granular permissions are supported.
- See Which Procore tools support Granular Permissions?
- Additional Information:
- Permission levels (e.g., None, Read Only, Standard, Admin) define the user's level of access permission to a Procore tool. See What are the default permission levels in Procore?
- To learn about the permitted tasks for each permission level, see User Permission Matrix - Web.
- Granular permissions are supported when you assign one (1) of the following permission levels on a role-based permission template for a supported tool:
- 'Standard'. This is the most common use and provides all the task privileges associated with the 'Standard' permission on the desired tool plus the specific granular permissions described for the tool below.
OR - 'Read Only'. This is designed for special use cases and provides users with view access on the desired tool plus the specific granular permissions described for the tool below. For details, see Can I provide users with 'Read-Only' level permission with limited access to update information in Procore?
- 'Standard'. This is the most common use and provides all the task privileges associated with the 'Standard' permission on the desired tool plus the specific granular permissions described for the tool below.
Steps
- Navigate to the company's Directory tool.
This reveals the 'Company Directory' page. - Click Configure Settings
.
This reveals the Company Settings page. - Choose one of these options:
- If you want to create a new template:
- Under Add a New Permission Template, type the name for your new template in the Name box.
- Click Create.
The system creates the new template.
OR
- If you want to edit an existing template, select one of the following from the Permission Templates For list:
- A project permission template (e.g, marked "(Project)').
OR - A company permission template (e.g, marked "(Company)').
- A project permission template (e.g, marked "(Project)').
- If you want to create a new template:
- Click Edit.
This places the selected template into edit mode. - Scroll to one of the supported tools (e.g., Admin, Bidding, Commitments, Directory, Documents, and Punch List).
- Place a GREEN checkmark in the Standard or Read-Only column. Then set the needed granular permissions for the desired Procore tools follows:
Admin
- Mark one (1) or more of the following checkboxes in the Granular Permissions area:
Note: To learn about the different tasks that can be performed for the permission level you specified, see the Permissions page for the project's Admin tool.
- Manage Active Tabs. Grants users the privilege to add, modify, and remove the Procore tools that are active on a project. See Add and Remove Tools on a Project and Rearrange the Tools in the Project's Toolbox.
- Manage Cost Codes. Grants users the privilege to add, edit, and delete cost codes on a project. See Add or Edit Project Cost Codes and Delete Project Cost Codes.
Bidding
- Mark one (1) or more of the following checkboxes in the Granular Permissions area:
Note: To learn about the different tasks that can be performed for the permission level you specified, see the Permissions page for the Bidding tool.
- Create Bid Notes. Grants users the privilege to create bid notes. See Add Bid Notes to the Bid List.
- Edit Bid Notes. Grants users the privilege to edit bid notes.
- Delete Bid Notes. Grants users the privilege to delete bid notes.
Note: Users with 'Standard' or 'Read-Only' level permissions to the Bidding tool will also need to be added to the Bid Package's distribution list to see the bid package and perform the actions above.
Budget
- Mark one (1) or more of the following checkboxes in the Granular Permissions area:
Note: To learn about the different tasks that can be performed for the permission level you specified, see the Permissions page for the Budget tool.
- Import Budget CSV. Grants users the privilege to import a budget from a CSV file. See Import a Budget CSV.
- Create and Edit Original Budget Amount. Grants users the privilege to create and edit the original budget amount. Note: To edit the Original Budget amount for an unlocked budget, first ungroup the line items. See Create a Budget Line Item, Create a Budget Line Item (CBF), and Edit a Budget.
Commitments
- Mark one (1) or more of the following checkboxes in the Granular Permissions area:
Note: To learn about the different tasks that can be performed for the permission level you specified, see the Permissions page for the Commitments tool.
- View Private Purchase Orders: Grants users the privilege to see purchase orders marked as private, without having to add them to the 'Private' drop-down.
- View Private Subcontracts: Grants users the privilege to see subcontracts marked as private, without having to add them to the 'Private drop-down
- Create Purchase Order. Grants users the privilege to create purchase orders. See Create a Purchase Order.
- Create Subcontract. Grants users the privilege to create subcontracts. See Create a Subcontract.
- Update Purchase Order. Grants users the privilege to edit purchase orders. See Edit a Commitment.
- Update Subcontract. Grants users the privilege to edit subcontracts. See Edit a Commitment.
Daily Log
- Select 'Read-only' or 'Standard' permissions in the Daily Log column.
- Mark the checkbox in the Granular Permissions area:
Note: To learn about the different tasks that can be performed by default for the permission level you specified, see the Permissions page for the Daily Log tool. - Allow Collaborator Entry. Grants users the privilege to create daily logs in the Notes and Manpower logs. By default, these users (a.k.a., collaborators) can enter Manpower and Notes logs (see Allow Daily Log Entries as a Collaborator). The Daily Log 'Admin' user can also configure the Daily Construction Report and Delivery Logs for subcontractor entry. See Approve Collaborator-submitted Daily Log Entries.
Direct Costs
- Select 'Read-only' or 'Standard' permissions in the Daily Log column.
- Mark one (1) or more of the following checkboxes in the Granular Permissions area:
- Create Direct Cost. Grants users the privilege to add a direct cost to the project's Direct Costs tool. See Create a Direct Cost.
- Update Direct Cost. Grants users the privilege to edit a direct cost in the project's Direct Costs tool.
- Delete Direct Cost. Grants users the privilege to delete a direct cost in the project's Direct Costs tool.
Directory
- Mark one (1) or more of the following checkboxes in the Granular Permissions area:
Note: To learn about the different tasks that can be performed for the permission level you specified, see the Permissions page for the Project Directory.
- Add from Company Directory (Assignable Permission Templates Only). Grants users the privilege to bulk add users with profiles in the Company Directory to the Project Directory. See Bulk Add People and Companies to a Project from the Company Directory.
- Create and Edit Users (Assignable Permission Templates Only). Grants users the privilege to add individual users from the Users tab in Project Directory. See Add a Person to the Project Directory.
- Create and Edit Companies. Grants users the privilege to create and edit Vendors in the Project Directory. See Add a Company to the Project Directory.
- Create and Edit Distribution Groups. Grants users the privilege to create and edit distribution groups in the Project Directory. See Add a Distribution Group in the Project Directory.
- Manage Permission Templates (Assignable Only). Grants users the privilege to manage permission templates in the Project Directory. See Assign a Permission Template to a Project User.
- Request Company and People Imports. Grants a user with 'Standard' permission the privilege to submit a request to import users or vendors to the Project Directory. See Request Company and People Imports.
Documents
- Mark one (1) or more of the following checkboxes in the Granular Permissions area:
Note: To learn about the different tasks that can be performed for the permission level you specified, see the Permissions page for the Documents tool.
- Access Private Folders and Files. Grants users the privilege to access folders and files marked private. To learn more about file/folder privacy in the Documents tool, see Change Permission Settings on a Folder/File and Can I make files and folders in the Documents tool private by default?.
- Rename Folders and Files. Grants users the privilege to rename both files and folders in the Documents tool. See Rename a File and Rename a Folder.
- Move and Copy Files and Folders. Grants users the privilege to move and copy both files and folders stored in the Documents tool. See Move Files and Folders.
- Set Permissions. Grants users the privilege to use the Manage Permissions button in the Documents tool. See Manage Permissions for Files and Folders.
- Delete Folders and Files. Grants users the privilege to delete files and folders in the Documents tool. See Delete Files/Folders.
- See Recycle Bin. Grants users the privilege to view the Document tool's Recycle Bin in order to view its contents. To learn how to retrieve an item from the Recycle Bin, see Retrieve a File or Folder from the Recycle Bin.
Drawings
- Mark one (1) or more of the following checkboxes in the Granular Permissions area:
Note: To learn about the different tasks that can be performed for the permission level you specified, see the Permissions page for the Drawings tool.
- Upload Drawings. Grants users the privilege to upload drawings to the drawings tool. All drawings uploaded to the Drawings tool by a 'Standard' or 'Read only' user will need to be reviewed for OCR accuracy and will be unpublished until an 'Admin' user reviews and publishes the drawings to the team. See What is the unpublished status on drawings?
Punch List
- Mark one (1) or more of the following checkboxes in the Granular Permissions area:
Note: To learn about the different tasks that can be performed for the permission level you specified, see the Permissions page for the Punch List tool.
- View Private Punch Items Assigned to Users Within Same Company. Grants a user the privilege to view all punch items assigned to colleagues within their same company (including punch items marked as 'Private'). See View All Punch List Items.
- Respond to Punch Items Assigned to Users Within Same Company. Grants a user the privilege to respond to punch items assigned to other users within the same Procore company account. This includes responding to punch items marked as 'Private'. See Resolve a Punch List Item.
- Click Update.
The system saves your changes to the selected permission template.