Roles and permissions by module
The reference for who can do what: the team role, each module's access level, and how access defines the billed seat.
The two levels of control
What each person sees in Movitera® passes through two filters. The team's plan defines which modules exist in the workspace; each member's per-module access defines what they see and do inside them. Both are adjusted in the Configurar usuário (configure user) dialog — see Manage members and access.
Team role
| Role | What it can do |
|---|---|
Administrador (admin) | Everything: adds and removes users, configures the team and billing, and grants any access level. |
Gerente (manager) | Manages members and team settings, but only grants levels up to their own and doesn't edit anyone above them. |
Membro (member) | Uses the modules according to the access granted. Doesn't see Team, Members, or Billing in Settings. |
Per-module access
Each member has one level per module, set in the Configurar usuário dialog's selectors. "Sem acesso" (no access) is always available and hides the module from that person.
| Selector | Levels | What they unlock |
|---|---|---|
| "Acesso ao Vault" (Vault access) | Gerenciador (manager) · Usuário (user) | Managers run groups, access, audit, and rotation; users use credentials. |
| "Acesso ao SRM" (SRM access) | Gerenciador · Usuário | Vendors, contracts, and analyses. |
| "Acesso às Tarefas" (Tasks access) | Gerenciador · Usuário | Tasks and projects. |
| "Acesso ao Closure" (Closure access) | Supervisor · Agente (agent) · Solicitante (requester) | Supervisors and agents handle tickets; requesters open and follow their own. |
| "Acesso ao Wiki" (Wiki access) | Administrador (admin) · Editor · Visualizador (viewer) | Administering, editing, or reading the documentation. |
| "Acesso ao Inventário" (Inventory access) | Gerenciador · Usuário | Inventory items, locations, and categories. |
| "Controle remoto (Link)" (remote control) | Operador remoto (remote operator) | Opening and viewing devices' remote desktop sessions. |
| "Acesso ao Forge" (Forge access) | Administrador · Gerenciador · Usuário | Engineering domains, initiatives, and issues. |
| "Acesso ao Muse" (Muse access) | Administrador · Usuário | The AI assistant. Without access, the module doesn't appear in the menu. |
Access defines the billed seat
The set of access levels classifies each member into a billing seat, shown as a badge in the member list: Agente IT (IT agent), Usuário do Vault (Vault user), or Assento gratuito (free seat). Access changes can change the seat — the dialog shows the impact before saving (Mostrar impacto no faturamento, show billing impact). Prices are in Plan, seats, and invoices.