Permissions

The Fördermittelkompass permission system allows you to flexibly control which team members can access which features. Here you’ll find everything about roles, permissions, and effective management.

Overview of the Permission System

Two-Level Role System

Fördermittelkompass uses a clear, two-level system:

• Editor: Basic work permissions
• Admin: Full access to all features

Security Principles

• Principle of Least Privilege: Users only receive necessary permissions
• Role-Based Access Control: Permissions are managed via roles
• Secure Defaults: New users are assigned Editor rights by default

Detailed Role Descriptions

Editor

Target Group: Regular team members working with funding programs

Access to Core Features:

• Funding Program Matching: Full access to all search functions
• Manage Favorites: Mark, rate, and organize programs
• Downvote: Hide irrelevant programs
• Project Management: Create, edit, and manage projects
• Application Processing: Prepare and edit funding applications
• AI Assistance: Use all AI-powered features
• Notifications: Manage email preferences

Read-Only Access to:

• Account Information: View organization data
• Team Members: Overview of other users
• Statistics: Basic account metrics

No Access to:

• User Management: Invite, remove, or change roles
• Account Management: Edit organization data
• Billing: Subscription and payment information
• Admin Areas: Advanced system settings

Admin

Target Group: Executives, IT managers, account owners

Full access to all Editor features plus:

• User Management: Fully manage the team
• Account Administration: All organization settings
• Billing Management: Subscriptions and payments
• Security Settings: Advanced security features
• System Configuration: Account-wide settings

Special Admin Functions:

• Send Invitations: Add new team members
• Assign Roles: Manage permissions of other users
• Remove Users: Remove team members from the account
• Edit Account Data: Fully manage the organization profile
• Matching Settings: Define search criteria for the whole team

Managing Permissions

Assigning Roles

How to change a team member’s role:

1. Open User Management: Go to "Administration > User Management"
2. Select User: Click "Edit" next to the relevant name
3. Choose New Role: Select between "Editor" and "Admin"
4. Save Changes: Confirm the new role assignment
5. Immediate Effect: New permissions are active immediately

Role Change Notification

• Automatic Email: User is informed about the role change
• New Permissions: Overview of changed access rights
• Instructions: Links to relevant help articles

Security Measures

Protection Against Self-Lockout

The system prevents problematic situations:

Last Admin

• Cannot Be Demoted: The last admin cannot change their own role
• Warning: System displays a corresponding message
• Solution: Assign another user as admin first

Self-Removal

• Blocked: Users cannot remove themselves
• Reason: Prevents accidental lockout
• Alternative: Other admins can remove users

Permission Audit

Regular review of permissions:

Who should be Admin?

• Organization Leadership: Executives and decision-makers
• IT Managers: People with technical responsibility
• Project Leads: Main persons responsible for funding projects

Who should remain Editor?

• Project Teams: Staff working on specific applications
• External Consultants: Temporary team members
• Trainees/Interns: People in training

Access Control in Practice

How Permission Checks Work

The system automatically checks for each action:

1. Authentication: Is the user logged in?
2. Authorization: Do they have permission for this action?
3. Contextualization: Does the resource belong to their account?
4. Logging: All accesses are documented

Troubleshooting Access Issues

Problem: "Access Denied" message

• Check the Role: Does the user have the necessary permission?
• Clear Cache: Clear browser cache and cookies
• Log In Again: Renew the session
• Contact Support: For persistent issues

Common Scenarios

Project-Based Teams

Situation: Temporary projects with changing teams

• Solution: Flexible role assignment depending on project phase
• Best Practice: Project leads as temporary admins

External Consulting

Situation: External consultants should collaborate

• Solution: Editor role with limited access
• Security: Time-limited account membership

Organizational Restructuring

Situation: New leadership structures arise

• Solution: Systematic review and adjustment of roles
• Communication: Transparent information about changes