The Buildary user permission system is designed to allow very straightforward work on smaller projects with a few members project team. At the same time, it is flexible enough to meet the demands of large corporate customers and project teams of the largest construction sites.

The Buildary user permission system can be viewed as a three-level system.

The first level of permissions is at the domain level and controls if the user can create new projects and diaries in that domain. The user's permissions are set by the domain administrator. For users working in their personal domain, this level is irrelevant, because, in the personal domain, the user always has all the permissions.

The second level of permissions is at the project level where company roles and member roles, as well as their permissions on the project site, can be defined for the entire project team.

The third level is the construction diary and its entries. For each construction diary, authorised persons and their roles are listed. The role defines the user's permissions in the diary. This is a level that every diary administrator needs to understand and use properly.

On the other hand, it is very important for a company domain administrator to correctly understand and set domain-level permissions. Only the employees of your company are added to the domain user list. The external users are added only as project team members of a specific project. Not to the domain user list.

Domain users can be granted the following permissions:

- Domain Administration - This permission allows the user to edit domain settings, insert domain users including their permission settings, delete the domain.

- Create New Project - This permission allows the user to create new projects in a given domain.

- Administrate Project - This permission allows the user to edit project information, insert new companies, and team members to the project, create new project diaries but always only on the projects where he is a team member.

- All Projects Administration - This role allows for the configuration of all projects within the domain (regardless of who created them), such as adding organizations, team members, modifying role dictionaries, as well as creating and configuring diaries, editing cover pages, and managing authorized persons from identification details. Assigning this role grants the user read-only access to the daily records. This role does not grant the ability to make daily entries or add supplementary documents, such as basic documents, project documents, inspections, and other paperwork.

- All Projects Reader -Allows access to all diaries within the domain, without the ability to make any modifications.

The user is automatically written to domain users as an administrator after he/she creates the domain. In addition, he/she becomes the owner of the domain which grants him/her the same permission as a domain administrator. Therefore, deleting a user from domain user list or changing his/her domain permissions can not restrict the domain owner in his/her permissions.