Why Access Control Matters in a Repair Shop
In a small repair shop, it's tempting to give everyone full access to "keep things simple." But as your team grows, full access for everyone creates problems:
Role-based access control solves these problems by giving each person access to exactly what they need — and nothing more.
The Four Core Roles in RepairCoreX
Technician: What they can do:What they cannot do:
What they cannot do:
What they cannot do:
Step-by-Step: Setting Up Roles
Step 1: Go to Settings → Roles and Permissions Step 2: Review the default roles. You can use them as-is or customize them. To customize, click a role and toggle individual permissions on or off. Step 3: To invite a new staff member, go to Settings → Team → Invite Member. Enter their email address and select their role. Step 4: The staff member receives an email with an invitation link. They set their own password and are in.Customizing Permissions Beyond the Defaults
RepairCoreX permissions are granular — you can customize beyond the four default roles. Examples:
Senior Technician: All technician permissions PLUS ability to create tickets and see all open tickets (not just their own). Useful when your senior tech also handles intake. Inventory Manager: Front desk permissions PLUS full inventory management. For shops where one person handles all purchasing but doesn't touch invoicing. Reporting Only: View-only access to financial reports and dashboards. For an accountant or business advisor who needs visibility without the ability to change anything.Managing Access When Staff Leave
This is one of the most important practices for account security: when a staff member leaves your business, disable their account immediately.
Go to Settings → Team, find the employee's account, and click Disable. Their access ends immediately. They cannot log in. Their historical actions remain in the audit log (for accountability) but they cannot take new actions.
Do not delay this step. An active account for a former employee — especially one who left under difficult circumstances — is a security risk.
The Audit Log: Who Did What, When
Every action in RepairCoreX is logged with the user who performed it and the timestamp.
This means:
The audit log is not about mistrust — it's about accountability and the ability to investigate when something goes wrong. Most of the time, it's never needed. When it is needed, it's invaluable.
Access control and audit logs together create a system where everyone is accountable, everyone is safe, and the business data is protected.