Grant User Access to Workers

Customer Support Documentation: Worker to Company User/Admin Conversion

Overview

This feature allows company admins, FCA Admins, Super Admins, and FCA OSRs to convert workers into company users or admins directly from the worker detail page. For company admins, this streamlines a common workflow where workers on job sites need elevated access to company systems without needing FCA Admin or Super Admin assistance.

Key Concepts

What this feature does:

Enables authorized users to grant company user or admin access to verified workers
The worker receives access that mirrors the granting admin's permissions (for company admins and FCA OSRs) or can be customized (for FCA Admins and Super Admins)
The conversion happens directly from the worker profile with a simple button workflow

What this feature does NOT do:

Does not allow company admins to revoke user/admin access once granted (only FCA/Super Admins can revoke via Security Permissions)
Does not work across companies for company admins
Does not work for unverified or inactive workers

Access Requirements

Who Can Grant Access?

General Company Admins - can grant access for their own company only
Project-Specific Company Admins - can grant access for their own company only, limited to projects they have access to
FCA Admins - can grant access for any company
Super Admins - can grant access for any company
FCA OSRs - can grant access for any company they have access to, limited to projects they have access to (all OSRs are project-specific)

Who Can Receive Access?

Must be an active, verified worker under the company
Cannot already be a user/admin under that company
Worker can be under multiple companies, but access is granted for one company at a time

How It Works: The Conversion Process

Step 1: Accessing the Feature

User navigates to a worker's detail page
If the worker is active, verified, and not already a user under this company, a "Grant User Access" button will appear
If the worker is already a user/admin, this button will be hidden

Step 2: Selecting Access Type The user chooses one of two options:

Company User - standard user access
Company Admin - administrative access

Step 3: Understanding Access Scope The access granted depends on the granting user's role and access level:

General Company Admin can grant:

General company user
General company admin
Scope: Their own company only

Project-Specific Company Admin can grant:

Project-specific user (same projects as admin)
Project-specific admin (same projects as admin)
Scope: Their own company only, limited to projects they have access to

FCA Admin can grant:

General company user
General company admin
Project-specific user
Project-specific admin
Scope: Any company

Super Admin can grant:

General company user
General company admin
Project-specific user
Project-specific admin
Scope: Any company

FCA OSR can grant:

Project-specific user (limited to projects they have access to)
Project-specific admin (limited to projects they have access to)
Scope: Any company they have access to, limited to projects they have access to (all OSRs are project-specific)

Note for FCA Admins and Super Admins: Unlike company admins and FCA OSRs, FCA Admins and Super Admins are not restricted to mirroring their own access level and can grant any type of access as appropriate for the worker's needs.

Step 4: Confirmation

A confirmation popup appears describing:
- The type of access being granted
- The consequences of this action
- That this action cannot be reversed by company admins (but can be reversed by FCA/Super Admins)

Step 5: Completion

Once confirmed, the worker is converted to a user/admin
The worker receives a notification to their primary contact method
The user UI automatically pops up showing required fields that need to be completed
Any further adjustments to permissions must be made in the user UI (not from worker profile)

Important Rules & Limitations

Company Boundary Rule

For Company Admins:

Access is granted within their own company only
Company admins cannot convert workers from other companies
General company admins can grant general access across the entire company
Project-specific admins can only grant access within their company and only to projects they have access to

For FCA OSRs:

Can grant access across company boundaries (for companies they have access to)
All OSRs are project-specific and can only grant access to projects they have access to
Access granted mirrors their own project limitations

For FCA Admins and Super Admins:

Can grant access across company boundaries
No project restrictions
FCA Admins and Super Admins have full flexibility

Multi-Company Workers

If a person is a worker under multiple companies:
- They become a worker/user under the company where access was granted
- They remain a worker-only under all other companies
Example: John is a worker for Company A and Company B. Company A grants him user access. John is now a user at Company A but still just a worker at Company B.

Revoking Access

Company admins cannot revoke user/admin access once granted
FCA Admins and Super Admins can revoke access via Security Permissions
If a company admin needs to revoke access, they must contact an FCA Admin or Super Admin

Worker Status Requirement

Only active and verified workers can be converted
Inactive or unverified workers will not see the "Grant User Access" button

Visual Indicators

All worker profiles now clearly display if the worker also has user/admin access under that company. Look for access level badges or indicators on the worker profile showing their dual worker/user status.

Troubleshooting Common Issues

"I don't see the Grant User Access button" Possible reasons:

The worker is already a user/admin under this company
The worker is not verified
The worker is inactive
For company admins only: You're viewing a worker from a different company
You don't have appropriate permissions

"I granted access by mistake and need to revoke it"

Company admins cannot revoke access - contact an FCA Admin or Super Admin
FCA Admins and Super Admins can revoke access via Security Permissions
The change will be logged in the Audit Log for reference

"The worker needs different permissions than what I can grant" For company admins and FCA OSRs:

Initial access granted must mirror your own access level
After conversion is complete, adjustments can be made in the user UI
For more complex permission changes, work with FCA Admins or Super Admins via Security Permissions

For FCA Admins and Super Admins:

You have flexibility to grant any appropriate access type
Further adjustments can still be made in the user UI after conversion

"I'm a company admin trying to convert a worker from another company"

This is not permitted for company admins
Workers can only be converted to users by company admins from their own company
The worker's company admin must perform this conversion, OR
An FCA Admin, Super Admin, or FCA OSR (with appropriate access) can perform the conversion

"I'm a project-specific admin and can't grant the access I want"

Project-specific admins can only grant access to projects they themselves have access to
The granted access will mirror your project assignments
For access to additional projects, contact a general company admin, FCA Admin, or Super Admin

"I'm an FCA OSR and can't grant the access I want"

All FCA OSRs are project-specific and can only grant access to projects they themselves have access to
The granted access will mirror your project assignments
For access to additional projects or to grant general company access, contact an FCA Admin or Super Admin

"I'm an FCA OSR and don't see the button for a specific company"

Verify you have access to that company
If you need access, contact a Super Admin or FCA Admin

Audit & Tracking

All worker-to-user conversions are recorded in the Audit Log with:

Who granted the access
What type of access was granted
When the conversion occurred
Which worker was converted

This provides a complete audit trail for compliance and troubleshooting.

Quick Reference for Support

Can company admins grant access? Yes, to their own company's active and verified workers

Can FCA Admins/Super Admins/FCA OSRs grant access? Yes, across companies (FCA OSRs: companies they have access to)

Can company admins revoke access? No, only FCA/Super Admins can

Can FCA Admins/Super Admins revoke access? Yes, via Security Permissions

Cross-company conversions?

No for company admins
Yes for FCA Admins/Super Admins/FCA OSRs (with appropriate company access)

Project-specific limitations?

Project-specific company admins: Can only grant access to projects they have access to
FCA OSRs: Can only grant access to projects they have access to (all OSRs are project-specific)
FCA Admins/Super Admins: No project limitations

Worker status requirements? Must be active and verified

Where to find it? Worker detail page → "Grant User Access" button

Access scope for company admins and FCA OSRs? Mirrors the granting user's permissions

Access scope for FCA Admins and Super Admins? Any appropriate access type

Notification sent? Yes, to worker's primary contact method

Logged? Yes, in Audit Log