Authorization (HRM)
Authorization (HRM) defines Raytio's access control model. It covers user roles, role hierarchy, permissions, authorization policies, relationship-based access, and menu visibility.
Authorization (HRM) defines Raytio's access control model. It covers user roles, role hierarchy, permissions, authorization policies, relationship-based access, and menu visibility.
Raytio's authorization model combines role-based permissions, relationship-based access, policy exceptions, and menu visibility. Together these controls determine what a user can do, which records they can access, and which actions appear in the interface.
The platform uses a fully data-driven menu system rather than hard-coded navigation. This enables role-based visibility, per-tenant customisation, dynamic schema binding, and hierarchical menu structures that nest to arbitrary depth.
The PPM module uses a layered role system that combines tenant-level permissions with project-level roles. This page explains how the roles relate to each other and what each role can do.
Roles are the foundation of Raytio's access control model. Every user is assigned one or more roles, and those roles determine what the user can do, what they can see, and what appears in their UI. Roles are organised into a hierarchy where child roles inherit from parent roles, creating a layered permission structure.
WRM separates the template for a worker from the running instance. A worker definition is the template; a worker is the instance. This page explains how the two relate, what each contains, and how to create custom worker definitions.
The WRM module provides a unified way to define, configure, and manage workers across your organisation. A "worker" in Raytio is any entity that performs work — a human team member, an AI agent, or an automated service. WRM gives each worker a structured identity and tracks the resources it needs to operate.
Raytio's Worker Relationship Management (WRM) module describes every worker — human or AI — and everything required to spin one up: role, template, system prompt, model stack, and toolset. WRM brings structured worker identity and resource management into the platform with the same access control and multi-tenancy guarantees as the rest of Raytio.