Skip to main content

Roles & access

Not everyone who logs in to Oho should be able to do everything. A role decides what a person can see and do — from full control of the platform down to read-only reporting. This page explains the three roles, what each one can do, and how you narrow a person's view to just the part of the business they look after.

Roles are set when you invite someone, and an admin can change them at any time. If you're ready to add people, see Invite your team & assign roles.

The three roles​

Everyone who signs in to Oho is one of three roles:

  • Admin — full administrative control of the platform. Admins manage users and roles, configure organisations and verification sources, and can work with every worker across the whole business.
  • Manager — runs compliance day-to-day. Managers add and edit workers, record and verify credentials, and send recruitment and fetch requests — but only within the organisations they've been assigned, and they can't change platform settings.
  • Observer — read-only. Observers can view workers, credentials, and the compliance dashboards, and export reports, but they can't make changes.

What each role can do​

CapabilityAdminManagerObserver
View workers, credentials & compliance✓✓✓
Export & download reports✓✓✓
Add & edit workers, credentials & exemptions✓✓—
Send recruitment & fetch requests✓✓—
Configure organisations & verification sources✓——
Administer users, roles & platform settings✓——
AccessAll organisationsAssigned organisationsAssigned organisations

Admins always see the whole business. Managers and Observers see only what they've been given access to (below).

Scoping access to organisations​

Your people are grouped into organisations — sites, business units, or regions. When you invite a Manager or Observer, you choose which organisations they're responsible for, and from then on their view of workers and compliance is limited to those groups. Admins aren't scoped — they see every organisation.

You can also narrow a Manager or Observer to one or both sides of Oho:

  • Recruit — screening applicants before they start.
  • Continuous checks — the ongoing monitoring of workers already on the books.

So a recruiter might be a Manager scoped to Recruit for two sites, while a site supervisor is a Manager scoped to Continuous checks for their own location only.

First sign-in​

When someone you've scoped signs in for the first time, Oho greets them and shows the organisations you reserved for them, asking them to pick the ones they're responsible for before they continue. That choice sets which workers and compliance they'll see from then on. Admins skip this step, because they already see everything.

Signing in with your company login​

If your organisation uses single sign-on, people reach Oho through your identity provider (Okta, Microsoft Entra ID, Google Workspace, or another) rather than an Oho password. SSO decides who can sign in; the roles and scoping on this page still decide what they can do once they're in. See Set up SSO.