Give every person the access their job needs. Nothing more.
Role-based access control lets you build named roles, tick exactly what each one can create, view, edit or delete across every part of SiteConnect, and assign your people to them, so sensitive safety records stay in the right hands and every change is accountable.
Permissions built for how a site runs
Role-based access control is account administration built for health and safety — give every person exactly the access their role needs, keep sensitive records restricted, and know who changed what.
Build roles around your team, not ours
Create named roles like Site Supervisor or Read-only Auditor, and tick exactly what each one can work with across hazards, incidents, inductions, assets and more. Give someone the access their job needs, and nothing else.
Control down to create, view, edit and delete
Every feature can be opened up or locked down one action at a time, rather than switched fully on or off. Let site staff add records without browsing the whole register, or give an auditor full visibility with no ability to change a thing.
Safe by default, and hard to lock yourself out of
Every account starts with an Administrators role and a baseline Users role, so there is nothing to configure on day one. After that, SiteConnect always keeps at least one administrator in place — a change that would leave the account without one is simply refused.
Onboard one person, or update a hundred at once
Set up a new starter across several roles from their own profile, or select a group of employees and assign a role to all of them in one action. Role changes apply automatically — no one needs to sign out and back in.
Keep sensitive records in the right hands
We'll show you exactly how SiteConnect lets you build roles around your organisation, and how the guardrails keep your account safe as your team grows.
Building a role — name it, tick the permissions it needs, and watch the count update live.
Create, View, Edit, Delete — set each action independently across every feature.
The built-in guardrails — see what happens when a change would remove your last administrator.
Bulk assignment — put a dozen people into a new role in a single action.
Onboarding a starter — set someone up across several roles from their own profile.
Rated 4.7 stars by health & safety professionals
Finally, real accountability
We can see exactly who changed what on the incident register now. That matters when an auditor asks questions.
Onboarding takes minutes
New supervisors get the right access on day one instead of us figuring it out as we go.
Nothing sensitive leaks through
Subcontractors see their own site, nothing else. It is exactly the control we needed.
Trusted by 500+ construction companies
Part of a complete site safety platform
Role-based access control governs every module you use within SiteConnect's platform. You also get:
Get a free, live demo
Tour SiteConnect in less than 30 minutes
See the features, ask about case studies, and verify everything you've read here today. If you decide to put SiteConnect to the test, here's what's available for you.
There's no risk or obligation · No dramas · No gimmicks
Free 15-day trial to test with your actual crews on your actual sites.
Implementation support to get you up and running fast.
Training sessions for your team (though honestly, they won't need much).
Direct access to support — the team that answers in 15–20 minutes.
Frequently asked questions
Is role-based access control a separate product?
No — it's built into SiteConnect's all-in-one platform. Roles and permissions sit alongside your hazard registers, incidents, inductions and assets, so you control access to everything from one place.
What does my account come with by default?
Every account starts with two roles: Administrators, with full access to everything your subscription includes, and Users, the baseline every new employee receives. There is nothing to set up before you can start inviting people.
Can I limit someone to just one site?
No — permissions apply across your whole account rather than site by site. Give someone access to open sites and they can open all of them; control comes from which roles and features they hold, not which sites.
Can someone accidentally lock the whole team out?
No. SiteConnect always keeps at least one administrator in place, and at least one person able to manage roles. A change that would break either rule is refused until you assign that access to someone else first.
Does this slow down sign-in or site access for my crew?
No. Role-based access control governs the web portal — who can see and change records in the office. Site sign-in, inductions and daily work in the mobile and kiosk apps stay exactly as fast for your crews.
Can I see who changed a safety record, and when?
Yes. Every role is accountable to named people, so when a hazard, incident or inspection changes, you know exactly who had the access to make that change. That is the record an auditor or investigator will ask for.
Can I stop subcontractors seeing records that aren’t theirs?
Yes. Roles are account-wide, so you decide which features a contractor or subcontractor account can reach at all — give them access to their own sites and submissions, and nothing from the rest of your business.
Can I let someone view the hazard register without letting them edit it?
Yes. View is independent of Edit and Delete, so you can give someone full visibility of a register for reporting or audit purposes while keeping the records themselves locked to a smaller group.
What happens to a person’s access when they leave or change roles?
Unlink them from a role and their access to that role’s features is removed immediately on their next sign-in — no manual sign-out required. Moving someone off Administrators automatically drops them back to the baseline Users role, so no one is ever left without a defined access level.
Who is allowed to grant RBAC access itself?
Only people holding the RBAC Roles permission can create, edit or assign roles — and SiteConnect always keeps at least one person able to manage it, so your account can never end up with no one in control of access.
