Access by role
Tab & Shift Engineering Ltd. · what each role gets, who owns each place, and what happens when people join, move and leave
| Approved by | Prepared by | Date | Status |
|---|---|---|---|
| Paige Tab and Carl Shift Co-founders | Floor 16 Technologies | Oct 2, 2026 | v1.0 · Approved |
Summary
Every person gets access through their role, and every project through its team. Nobody is added to anything by name, so access arrives on the first day of a job and leaves on the last.
Why this plan. In the September access review, Payroll had been shared with everyone since 2019. A project manager who left in June could still open seven of these eight places, and the project manager starting Monday could open one of the four she needs.
What each role gets
| Role | Payroll | HR files | Board papers | Finance | Projects | Engineering drawings | Sales proposals | Company home |
|---|---|---|---|---|---|---|---|---|
| Leadership2 · Paige Tab, Carl Shift | Read | Read | Edit | Read | Readall | Read | Edit | Edit |
| Finance4 · Tom and three others | Edit | None | Editboard report | Edit | Readall, for billing | None | Read | Readas Everyone |
| People and Culture2 · Hana and one other | Read | Edit | None | None | None | None | None | Edit |
| Project managers12 · including Sam and Nadia | None | None | None | None | Edittheir projects | Read | Edit | Readas Everyone |
| Engineers40 · including Ravi and Liam | None | None | None | None | Edittheir projects | Edit | None | Readas Everyone |
| Field30 · including Diego | None | None | None | None | Edittheir projects | Read | None | Readas Everyone |
| Everyoneall 90 staff | None | None | None | None | None | None | None | Read |
"Their projects" means the projects a person is on. Each project has a team group that the project system fills from the project record: its project manager, engineers and field crew. Leadership and Finance read every project; Finance edits Board papers because Tom builds the board report.
Who owns each place
The owner decides who else gets in, answers for what is there, and reviews the access on the schedule below.
| Place | What is in it | Owner | Access reviewed |
|---|---|---|---|
| Payroll | Pay runs, salary records, bank files | Tom, Finance | Every quarter |
| HR files | Employee files, offer letters, reviews, cases | Hana, People and Culture lead | Every quarter |
| Board papers | Board packs, minutes, the monthly board report | Paige Tab, co-founder | Every quarter |
| Finance | Invoices, budgets, statements | Tom, Finance | Every quarter |
| Projects | One site per project, such as Henderson Builders | Sam, projects lead; each project, its project manager | Every six months, and at close |
| Engineering drawings | Issued drawings and drawing standards | Ravi, engineering lead | Every six months |
| Sales proposals | Bids, pricing, proposals | Carl Shift, co-founder | Every six months |
| Company home | News, policies, forms | Hana, People and Culture lead | Once a year |
Joiners, movers and leavers
- JoinerOn the start date, the hire record adds the role group and the project system adds the project teams. Nothing to ask for on day one.
- MoverOn the move date, the old role group comes off and the new one goes on. Nothing carries over, so access never piles up.
- LeaverOn the last day, the account is switched off and every group removed. Files pass to the manager, and projects to the next project manager.
- Groups, never names. Every place grants access to a role group or a project team, never to a named person.
- Exceptions end on their own. An owner can add one person by hand for up to 30 days. It is logged, and it expires.
- Only Company home is open to everyone. Company-wide links are switched off for Payroll, HR files and Board papers.