Two sidebars, one set of pages
TPAS renders five sidebar groups, and two of them are alternatives to each other rather than additions:
| Group | Shown to |
|---|---|
| Operations | everyone |
| Management | anyone with a dashboard of their own — dashboard:read or dashboard:read-uwa |
| Registry | everyone else |
| Insights | everyone |
| Administration | everyone |
Management and Registry lead to the same pages. Management arranges them into two drop-downs — Vehicles Management and People Management — and adds the Visitors register; Registry lists them flat, which suits a contractor's narrower set. So:
| Page | Under Management (TotalEnergies) | Under Registry (everyone else) |
|---|---|---|
| Vehicles | Vehicles Management → Vehicles | Vehicles |
| OBU Installation | Vehicles Management → OBU Installation | OBU → OBU Installation |
| Installation Report | Vehicles Management → Installation Report | OBU → Installation Report |
| OBU Distribution | Vehicles Management → OBU Distribution | OBU → OBU Distribution |
| TotalEnergies Staff | People Management → TotalEnergies Staff | not shown |
| Visitors | People Management → Visitors | not shown |
| Master List | People Management → Master List | Master List |
| Access Requests | People Management → Access Requests | Access Requests |
| Personnel & Badges | People Management → Personnel & Badges | Personnel & Badges |
| Stock Overview | Stock Overview | Stock Overview |
A path printed in this manual as Management → … and a path printed as Registry → … are the same destination. Where the two differ the chapter says so.
Operations is collapsed by default; the other groups open.
What each permission unlocks
The authoritative map.
| Group | Entry | Permission required |
|---|---|---|
| Operations | Dashboard (contractor view, /) | registration:create |
Dashboard (/dashboard) | dashboard:read | |
| UWA Dashboard | dashboard:read-uwa | |
| Gate Activity | access-record:read | |
| Gate Screen | verification:verify | |
| Verify Access | verification:verify | |
| Management / Registry | Vehicles | vehicle:read |
| OBU Installation | access-device:read | |
| Installation Report | organisation:read | |
| OBU Distribution | access-device:read | |
| TotalEnergies Staff | personnel:read | |
| Visitors | visitor:read | |
| Master List | master-list:read | |
| Access Requests | registration:read | |
| Personnel & Badges | personnel:read | |
| ⤷ Badges (a contractor's folder) | card:read | |
| Stock Overview | device-stock:read | |
| Insights | Reconciliation | reconciliation:read |
| Tourist Payments | report:read | |
| Reports | report:read | |
| Incidents | incident:read | |
| Administration | Contractors | organisation:read |
| Users & Roles → Users | user:read | |
| Users & Roles → Roles | authz-role:read | |
| Devices → Gate Devices | gate-device:read | |
| Devices → Device Registry | access-device:read | |
| Settings | setting:update |
setting:update, not setting:readAlmost every role holds setting:read, because the four stock thresholds are
printed under the tiles that measure against them. Gating the menu entry on
read would put Settings in every contractor's sidebar, so the entry
follows the permission that actually lets you change something.
Stock Overview is the whole device-stock module: pick a contractor, then
Devices, Dispatches, Returns and Repairs as tabs. The Repairs tab needs
device-stock:repair, so a contractor sees the other three and not that one.
Pages that are not in the sidebar
Three kinds of address exist outside the map above:
| Address | What it is |
|---|---|
/notifications | The notification history (Notification history). Reached from the bell, never the sidebar. No permission of its own. |
/stock/dispatches, /stock/returns, /stock/repairs, /stock/custody | The device-stock surfaces before they became tabs. Still routed, so older links and notifications keep working. Gated on device-stock:read like the tab. |
/stock/dispatch, /stock/return | The two batch pages, reached from a button (Dispatch, Starting a return). |
/visit, /pass/{reference} | The public tourist pages — no sign-in, no permission at all (Park pass). |
Permissions that gate buttons, not pages
Seven permissions never appear in the menu map because they unlock actions.
Everyone who can open a stock page holds device-stock:read; what they can do
there depends on which of these they also hold:
| Permission | The action it unlocks | Held by |
|---|---|---|
device-stock:dispatch | Send issued devices to a contractor; renew a held device in place | TotalEnergies stock control |
device-stock:receive | Confirm a dispatch | The contractor |
device-stock:return | Start a return | The contractor |
device-stock:acknowledge | Record what came back; take a badge back at the desk; declare a device lost | TotalEnergies stock control |
device-stock:repair | Triage a quarantined device; close a repair, including writing it off | A TotalEnergies administrator |
device-stock:manage | Approve or decline an extension request; run the overdue chase by hand | A TotalEnergies administrator |
setting:update | Change the four SLA thresholds | A TotalEnergies administrator |
This is why a contractor and an administrator open the same Dispatches tab and see different buttons on it. The page is one permission; the buttons are several (Device stock).
Read the map backwards to diagnose a complaint: "I can't see Reports" → the
account lacks report:read.
The map is the single source of truth for both the route gate and the page header, which is why a refused page never describes the page it is refusing you ("No access to this page").