Resources · Security and Access
Access, Permissions and Control.
How Glowback manages trust, role separation and data access, v1 overview.
This page reflects intended access design. Final permissions are verified against backend authorization. Details will be updated after backend review.
Design principles.
Stay-scoped guest access
Guest access is designed to be linked to the active booking period. When a stay ends, access is no longer valid. The hotel can revoke or reset access at any time.
Role-based access layers
Each role is intended to access only the functions relevant to its operational responsibility. Separation is designed into the access model, not bolted on.
Backend authorization as source of truth
Access decisions are intended to be enforced server-side. What appears in the UI reflects what the backend authorizes for that role.
Audit trail design
The system is designed to support activity logging for key operations including access events, task overrides, escalations and admin actions.
No PMS credential sharing
Glowback does not require access to your PMS credentials. The service layer is independent.
Access roles.
Guest
Stay-scoped access via link or QR code. Access is limited to the active booking period and can be revoked by the hotel at any time.
Reception
Intended access to guest access workflows, service request visibility and stay management. Not designed to include manager-only analytics.
Field Staff
Access to the staff job queue, department-relevant tasks, shift flows, progress updates and self-performance data.
Manager
Intended access to live property view, staff oversight, analytics, escalation management, reports, nudges and audit summaries.
Admin
Full configuration access including system setup, user management, audit logs, access control and all manager-level views.
Permission matrix.
✓ Intended capability, ◐ Limited or role-specific, - Not applicable. Final verification pending backend review.
| Role | Can request | Can generate guest access | Can accept jobs | Can update jobs | Can complete jobs | Can view rooms | Can view analytics | Can resolve escalations | Can configure |
|---|---|---|---|---|---|---|---|---|---|
| Guest | ✓ | - | - | - | - | - | - | - | - |
| Reception | ◐ | ✓ | - | - | - | ◐ | - | - | - |
| Field Staff | - | - | ✓ | ✓ | ✓ | ◐ | - | - | - |
| Manager | - | ✓ | - | - | - | ✓ | ✓ | ✓ | ◐ |
| Admin | - | ✓ | - | - | - | ✓ | ✓ | ✓ | ✓ |