How Roles Work
Each role maps to one or more Authentik groups. When you assign a role to an employee, they automatically gain access to all SSO apps associated with those groups.
Office Staff
0
General access to internal apps and tools
Authentik Groups:
internal-apps
email-signatures
time-tracking
Field Staff
0
Access to field apps, safety documentation, and mobile tools
Authentik Groups:
field-apps
safety-docs
mobile-access
Project Manager
0
PM tools, client portal admin, reporting dashboards
Authentik Groups:
pm-tools
client-portal-admin
reporting
Estimator
0
Estimating tools, client portal access, proposal generation
Authentik Groups:
estimating-tools
client-portal
proposals
Admin
0
Full administrative access to all systems
Authentik Groups:
admin-panel
user-management
all-apps
Accounting
0
QuickBooks, financial reporting, invoicing tools
Authentik Groups:
accounting-tools
quickbooks
financial-reports
Executive
0
Executive dashboards, all reports, strategic planning tools
Authentik Groups:
executive-dashboard
all-reports
strategic-tools
Authentik Integration
How roles sync with Authentik SSO
Automatic Sync
- • Role changes update Authentik groups automatically
- • New employees get groups based on assigned roles
- • Deactivated employees lose all group access
Manual Steps Required
- • Create new Authentik groups in Authentik admin
- • Configure app access for each group
- • Update role mappings when adding groups