HangarOS uses a role-based access control system. You define roles, assign specific permissions to each role, and then assign roles to users. This gives you granular control over who can access each feature.

Opening Roles & Permissions

From the company sidebar, expand User Management and click Roles. You need the roles:manage permission to access this section.

Understanding Permissions

Each permission key unlocks access to a specific feature or action within your company workspace:

company:edit — update the company name and other general settings.

roles:manage — create, edit, and delete roles and their permissions.

users:manage — invite, manage, and remove users from the company.

flightschool:manage — configure Flight School settings, including the instructor role.

instructor:panel:access — access the Instructor Panel to set personal availability hours.

billing:manage — open the billing portal to manage subscriptions and payment methods.

bookings:view — view the booking calendar and existing bookings.

bookings:manage — create, edit, and cancel bookings for any user.

bookings:administrator — full administrative control over all bookings.

aircraft:manage — add, edit, and delete aircraft in the fleet registry.

kb:view — view documents and folders in the Knowledge Base.

maintenance:view — view and update maintenance records and squawks.

Creating a Role

Click Create role. Give the role a descriptive name (for example, Flight Instructor, Student, Admin, Dispatcher). Then toggle on each permission the role should have. Click Save to create the role.

Editing a Role

Find the role in the list and click Edit. You can update the role name and toggle permissions on or off. Click Save to apply changes. All users currently assigned this role will have their access updated immediately.

Deleting a Role

Click Edit on a role, then click Delete role. A confirmation dialog will appear. You cannot delete a role that is currently assigned to users — you must first reassign or remove those users.

Recommended Role Setup

A typical flight school setup might include the following roles:

Administrator — all permissions enabled. Reserved for management staff.

Flight Instructor — instructor:panel:access, bookings:view, bookings:manage. Designated as the instructor role in Flight School Settings.

Dispatcher — bookings:manage, bookings:view, aircraft:manage, users:manage. For front-desk staff who manage day-to-day scheduling.

Student — bookings:view. Students can see the calendar but cannot create or modify bookings (unless you grant bookings:manage).

Maintenance — maintenance:view, aircraft:manage. For your maintenance team.

Wildcard Permission

A role with the * (wildcard) permission has access to all features and all future permissions. This is equivalent to a super-admin. Use it sparingly — typically only for the company owner.