Access scope & module access

Two sections of a role decide what its holders can reach:

  • Access Scope: "Which facilities holders of this role can work with."
  • Module Access: which modules they can use at those facilities.

Set both when you add or edit a role.

Quick reference

Where to find it: Settings (cog icon) → Identity and Access Management → Roles → Add Role or a role → Access Scope and Module Access

Who can access: Organisation admins, and people whose role includes Identity and Access Management

Purpose: Decide where a role applies and what it lets people do there

Access Scope

The Access Scope section of Add Role, with Facilities, Regions, Organisation and Chosen per user, and Module Access belowThe Access Scope section of Add Role, with Facilities, Regions, Organisation and Chosen per user, and Module Access below

Figure 1: Access Scope decides which facilities holders of the role can work with

OptionWhat it coversExample
Facilities"Only the facilities you pick below." Pick them in Facilities.A Clinic Coordinator role for two clinics
Regions"Every facility in the regions you pick below, including facilities added later."Campus IT for every campus in one state
Organisation"This role has access to all facilities and regions in the organisation"A Regional Operations Lead who oversees every site
Chosen per user"Assign access to specific facilities/regions when assigning this role to a user"Store Manager, given to each manager for their own store

Until you pick a facility for a Facilities role, the section warns: "No facilities selected yet. Holders of this role won't have access to any facility."

Which to choose:

  • Use Chosen per user when many people do the same job at different sites. One Venue Duty Manager role can serve every venue: you pick the venue when you give the role to each person.
  • Use Regions when the role should follow your growth. A new facility in the region is covered automatically.
  • Use Facilities for a fixed, short list of sites that won't change often.
  • Use Organisation sparingly, for people who genuinely need every site.

Every Performance Hub role template except Organisation Administrator uses Chosen per user.

Module Access

"Choose how the list is read, then tick the modules it covers."

The Module Access section, with Only selected modules and All modules except, and the module list grouped by areaThe Module Access section, with Only selected modules and All modules except, and the module list grouped by area

Figure 2: Module Access: only selected modules, or all modules except the ones you block

First choose how the list is read:

OptionWhat it means
Only selected modules"Only the modules you tick are available. New modules Performance Hub releases are not added automatically."
All modules except"Every module is available except the ones you block, including new modules as they are released."

Then tick the modules. They're grouped by area, such as Dashboard, Website & Digital Profile, Smart Club Technology, AI Modules & Agents, Settings / Account and Organisation Settings. Each group shows how many of its modules are ticked, for example 0 of 9.

To work through the list:

  • Type in Search to find a module.
  • Use All, Selected and Not selected to show only some modules. Each shows a count.
  • Use Select all or Clear all to tick or untick everything, and Expand All to open every group.
  • The count above the list, for example 0 of 25 selected, shows how many you've ticked.

Which to choose:

  • Only selected modules suits narrow roles, such as a Front Desk role that only needs Door & Gate Access, Display Screens and Audio Control. New modules stay hidden until you add them.
  • All modules except suits broad roles, such as a site manager who should get new modules as they're released but never billing or audit logs.