/ Latest from the blog
View all posts →
/ Platform & control
Live

Every change has a name on it, and everyone sees only what they should.

Boat dealership staff access and audit in one place. Access is set in buckets by section with per-person grants and denies. An audit log records who changed what, and a staff activity report shows what each person did.

BoaterOS staff access management: per-person access buckets such as Everything (admin), Parts Department, Standard and Sales (names blurred)
Access buckets and per-person grants
BoaterOS audit trail: filterable log of changed records with table and field, record id, old to new value and action
Audit log with actor, field and old-to-new values
/ What it does

Control without all-or-nothing permissions

Boat dealership staff access and audit replaces the single admin switch. Instead of one admin switch, you assign staff to access buckets by section and sub-page, then add or remove access for one person. The audit log records the actor, table, field, old value and new value on about thirty core tables. The staff activity report shows page views, leads handled and communications sent.

  • Access buckets by section and sub-page
  • Per-person grants and denies on top of a bucket
  • A staffer without access gets a clear 403, not a redirect
  • Audit log filtered by table, action, actor and date
  • Every access grant change is itself audited
  • Staff activity leaderboard with a drill-down per person
/ How it works

How to set it up

  1. 01

    Build buckets

    Name a bucket and tick the sections and sub-pages it can open.

  2. 02

    Assign staff

    Pick a bucket for each person. The everything bucket makes an admin, after a confirmation.

  3. 03

    Add exceptions

    Grant or deny one section for one person without editing the bucket.

  4. 04

    Review

    Use the audit log to answer who changed a price or a status, and the activity report for coaching.

/ Honest limits

What it doesn't do yet

Sub-page enforcement is partial

The sub-page system is built with a kill switch, but only a few pages check it. Most enforcement is at section level.

Activity capture is limited

It logs page views and texts sent. Email and call taps are not yet captured, so their columns may understate activity.

Staff login is Microsoft only

Staff sign in with Microsoft 365. A dealer without Microsoft 365 has no staff login path.

Some report columns depend on setup

If the activity report cannot load its lead and communication columns, the page shows Report unavailable rather than an error.

/ Questions

What dealers ask about this

Some are limited by role, such as F&I numbers to admins and price changes to the deal's rep or an admin. Access buckets control sections and pages.

It covers about thirty core tables including leads, deals, hulls, listings and customer boats, plus explicit rows for credential changes and impersonation.

The report is admin-only.

/ / Next