Apps
Loading apps...
Recent
Users
Loading...
Settings
CATALOG
Loading...
Manage the app catalog visible on the Apps tab.
ROLE TO APP ACCESS
Tap a role to toggle which apps it can access.
PERMISSION MATRIX
Loading matrix...
Toggle whole-app access per role. Changes preview here; nothing is saved until you tap Save.
ROLES REGISTRY
Add, archive, or recolor roles. Role keys are immutable once created - renaming requires creating a new role and migrating users.
CATEGORIES REGISTRY
Canonical buckets for the Apps tab. Replaces free-text
cluster values.DEPARTMENTS
Single source of truth for department membership. Head-of-department drives HRM and Leave Tracker approval routing.
EMAIL TO EMPID MAP
Lets downstream apps (HRM, CC, Leave Tracker) that authenticate by email find the matching Hub user. Required for cross-app permission resolution to work.
APP PAGES
Per-app page registry. When an app has pages defined, the Matrix tab gains expandable rows so admins can set permissions per page (e.g. inspector views qcdash.* but only edits qcdash.late).
APPROVAL LIMITS
Approval ceilings per role per scope. Downstream apps (Leave Tracker, Marketing, etc.) read these limits from the user's permission slice and block submissions over the cap.
TIME-BOUND GRANTS
Temporary role/permission grants that auto-revoke after expiry. A daily 03:00 trigger sweeps expired entries. Install once: run installDailyRevokeTrigger() in Hub Apps Script editor.
AUDIT LOG
Loading...
Latest 100 audit entries, newest first. Every registry edit, role change, permission toggle, and bulk action is recorded.
Profile
--
---
---
PREFERENCES
🌗
Appearance
›
🌐
Language
›
SECURITY
🔑
Change Password
›
Sign Out