Owner has full Admin privileges plus the "My Shop" tile for CRS #, address, and phone on invoices & LBEs.
Parts role: full access to inventory, POs, transfers, and parts on work orders. Cannot edit resolutions, sign discrepancies, or void LBEs.
Optional base location for this user. Used for checkout source & home-location resolution.
Elevates this user to lead their department. Skips the password re-entry on routine actions in their domain (e.g., a Parts Manager adjusting stock). Still requires fresh signatures for compliance actions (sign-offs, releases, lock LBE).
Designates this mechanic as a Lead. Lets them open work orders, edit WO header fields (customer, aircraft, type, status), receive parts into stock, and sign off parts requests before they go to Parts. Non-Lead techs can still work discrepancies, sign their own items, and check parts out; they just can't initiate or alter a WO at the top level.
Records the company's classification. Excludes this person from the employee payroll/ADP export. The system does not determine legal worker status.
Required for ADP Workforce Now payroll exports. Find in ADP under Person → Profile → Position.
Set Password
Leave blank to keep existing password
Page Access
Page access follows the Role selected above and updates automatically when you change it.
Owner & full Admin get every page; other roles get their standard set. A 👁 view only
tag means the role can open that page but not edit it.
Work
Parts & Inventory
Business
Compliance & Records
Certifying Signature
Live-sign only.
Per BSA's accountable-manager directive, stored user signatures are no longer used for sign-off events. Each disc, inspector accept, WO close, and LBE lock now captures a freshly-drawn signature in the moment. No per-user signature management here.
SMS consent: By enrolling this number you confirm the user agrees to
receive two-factor authentication (2FA) verification codes from your shop (Orion)
via SMS. This is a transactional security service, not marketing. Message frequency depends
on login activity. Message and data rates may apply. The user can reply STOP
to opt out or HELP for help at any time. See our
Privacy Policy and
Terms.
Code sent to . User should receive it within seconds.
✓ Enrolled - Save these recovery codes NOW
Each code works once. Print them, hand to user, store in a safe. They won't be shown again - only the user has access via SMS otherwise.
SMS Notifications
Loading…
2FA phone verification proves the number is valid; SMS notification enrollment is a separate opt-in. Enroll a user to send operational notification texts (they can opt out anytime).
Migration helpers - run once after a deploy. Idempotent (safe to re-run).
Backfill Aircraft Ratings → Inspector
For every user with an aircraft rating that used to have trained=true, set can_inspect=true.
Brings legacy data forward into the inspector-only model.
Import Annual FAA Training Records
Reads data/bsa-annual-faa-training-records.json (parsed from BSA's Annual FAA Training spreadsheet) and writes a completion to each matching user.
Skips terminated employees. Idempotent on completion date.
Reconcile current_stock with stock_levels
Walks every part and resets inventory.current_stock to the true SUM of stock_levels. Fixes drift caused by lot consumption + scanner usage before the May 2026 sync fix. Idempotent.
Create New Vendor
Creates the vendor in Joker and links it to this contractor. QBO is not touched unless the QBO vendor policy is set to auto-sync (status shows Unlinked otherwise).
