Permission Types

Reference for all permissions available in IronCase. Use this guide when configuring roles and understanding access control.

Permission Naming Convention

Permissions follow a consistent pattern:

category:action

Part	Description	Examples
category	The area of the system	`cases`, `evidence`, `ai`
action	What can be done	`view`, `create`, `edit`

Examples:

cases:view_assigned — View cases assigned to you
evidence:add — Add evidence items
ai:query — Ask the AI questions

Case Permissions

Control access to case records.

Permission	Description	Default Roles
`cases:view_assigned`	View cases assigned to this user	All roles
`cases:view_team`	View all cases on user's team	Supervisor
`cases:view_all`	View all cases in the system	Administrator
`cases:create`	Create new cases	Detective, Supervisor
`cases:edit`	Edit case details	All roles (own cases)
`cases:close`	Submit case for closure	Detective, Supervisor
`cases:close_approve`	Approve case closure	Supervisor
`cases:assign`	Assign cases to users	Supervisor
`cases:reassign`	Reassign cases between users	Supervisor
`cases:transfer`	Transfer cases between units	Supervisor
`cases:archive`	Archive closed cases	Supervisor
`cases:unarchive`	Restore archived cases	Administrator
`cases:delete`	Permanently delete cases	Administrator
`cases:export`	Export case data	Detective, Supervisor

Evidence Permissions

Control evidence handling capabilities.

Permission	Description	Default Roles
`evidence:view`	View evidence on assigned cases	All roles
`evidence:add`	Add new evidence items	All roles
`evidence:edit`	Edit evidence details	All roles
`evidence:delete`	Delete evidence items	Supervisor
`evidence:transfer`	Transfer evidence custody	All roles
`evidence:submit_lab`	Submit evidence to lab	Detective, Supervisor
`evidence:receive_lab`	Receive evidence from lab	Detective, Supervisor
`evidence:view_chain`	View chain of custody	All roles
`evidence:export_chain`	Export chain of custody	Detective, Supervisor
`evidence:upload_files`	Upload evidence files	All roles
`evidence:download_files`	Download evidence files	All roles

People Permissions

Control access to person records.

Permission	Description	Default Roles
`people:view`	View people on assigned cases	All roles
`people:add`	Add persons to cases	All roles
`people:edit`	Edit person information	All roles
`people:delete`	Remove persons from cases	Detective, Supervisor
`people:view_pii`	View sensitive PII (SSN, DOB)	Detective, Supervisor
`people:edit_pii`	Edit sensitive PII	Supervisor
`people:view_sealed`	View sealed records	Supervisor (with approval)
`people:merge`	Merge duplicate person records	Supervisor
`people:link_cases`	Link person across cases	Detective, Supervisor

Checklist Permissions

Control checklist functionality.

Permission	Description	Default Roles
`checklist:view_own`	View checklist items for own role	All roles
`checklist:view_all`	View all checklist items on case	Supervisor
`checklist:complete`	Mark items complete	All roles
`checklist:uncomplete`	Mark items incomplete	Supervisor
`checklist:skip`	Skip items as not applicable	All roles
`checklist:unskip`	Restore skipped items	Supervisor
`checklist:reopen`	Reopen completed items	Supervisor
`checklist:add_custom`	Add custom checklist items	Detective, Supervisor
`checklist:remove_custom`	Remove custom items	Supervisor

Digital Evidence Permissions

Control digital evidence requests.

Permission	Description	Default Roles
`digital:view`	View digital requests on case	Detective, Supervisor
`digital:create`	Create digital evidence requests	Detective, Supervisor
`digital:edit`	Edit pending requests	Detective, Supervisor
`digital:submit`	Submit requests to providers	Detective, Supervisor
`digital:cancel`	Cancel pending requests	Supervisor
`digital:receive`	Receive and log responses	Detective, Supervisor

Warrant Permissions

Control warrant request functionality.

Permission	Description	Default Roles
`warrant:view`	View warrants on case	Detective, Supervisor
`warrant:create`	Create warrant requests	Detective, Supervisor
`warrant:edit`	Edit warrant drafts	Detective, Supervisor
`warrant:submit_review`	Submit for supervisor review	Detective, Supervisor
`warrant:approve_draft`	Approve warrant drafts	Supervisor
`warrant:submit_court`	Mark as submitted to court	Detective, Supervisor
`warrant:log_return`	Log warrant return	Detective, Supervisor

Lab Request Permissions

Control forensic lab requests.

Permission	Description	Default Roles
`lab:view`	View lab requests on case	Detective, Supervisor
`lab:create`	Create lab requests	Detective, Supervisor
`lab:edit`	Edit pending requests	Detective, Supervisor
`lab:submit`	Submit requests to lab	Detective, Supervisor
`lab:cancel`	Cancel pending requests	Supervisor
`lab:receive`	Receive and log results	Detective, Supervisor
`lab:expedite`	Mark requests as expedited	Supervisor

AI Assistant Permissions

Control AI feature access.

Permission	Description	Default Roles
`ai:query`	Ask AI questions about cases	All roles
`ai:summarize`	Request AI case summaries	All roles
`ai:timeline`	Generate AI timelines	All roles
`ai:draft_warrant`	Request AI warrant drafts	Detective, Supervisor
`ai:analyze_evidence`	Request evidence analysis	Detective, Supervisor
`ai:suggest_steps`	Get AI next step suggestions	All roles
`ai:identify_patterns`	Request pattern analysis	Detective, Supervisor
`ai:generate_reports`	Generate AI report drafts	Detective, Supervisor

Approval Permissions

Control who can approve various risk levels.

Permission	Description	Default Roles
`approve:low`	Approve low-risk actions	All roles (self)
`approve:medium`	Approve medium-risk actions	Detective, Supervisor
`approve:high`	Approve high-risk actions	Supervisor
`approve:critical`	Approve critical-risk actions	Supervisor
`approve:override`	Override approval requirements	Administrator

Report Permissions

Control access to reports and analytics.

Permission	Description	Default Roles
`reports:view_own`	View reports for own cases	All roles
`reports:view_team`	View reports for team cases	Supervisor
`reports:view_all`	View all system reports	Administrator
`reports:create`	Create custom reports	Supervisor
`reports:export`	Export report data	Supervisor
`reports:schedule`	Schedule automatic reports	Administrator

Administration Permissions

Control system administration features.

Permission	Description	Default Roles
`admin:users_view`	View user accounts	Administrator
`admin:users_create`	Create user accounts	Administrator
`admin:users_edit`	Edit user accounts	Administrator
`admin:users_deactivate`	Deactivate users	Administrator
`admin:users_delete`	Permanently delete users	Administrator
`admin:roles_view`	View role definitions	Administrator
`admin:roles_create`	Create custom roles	Administrator
`admin:roles_edit`	Edit role permissions	Administrator
`admin:roles_delete`	Delete custom roles	Administrator
`admin:audit_view`	View audit logs	Administrator
`admin:audit_export`	Export audit logs	Administrator
`admin:settings`	Modify system settings	Administrator
`admin:integrations`	Configure integrations	Administrator

Default Role Templates

Quick reference for default role permission sets.

First Officer

Focused on initial response and scene documentation:

cases:view_assigned, cases:edit
evidence:view, evidence:add, evidence:edit, evidence:transfer
people:view, people:add, people:edit
checklist:view_own, checklist:complete, checklist:skip
ai:query, ai:summarize, ai:suggest_steps
approve:low

Detective

Full investigation capabilities:

All First Officer permissions, plus:
cases:create, cases:close, cases:export
evidence:submit_lab, evidence:receive_lab, evidence:export_chain
people:view_pii, people:delete, people:link_cases
digital:* (all digital evidence permissions)
warrant:* (all warrant permissions)
lab:* (all lab request permissions)
ai:draft_warrant, ai:analyze_evidence, ai:identify_patterns, ai:generate_reports
approve:medium
reports:view_own

Supervisor

Team oversight and approvals:

All Detective permissions, plus:
cases:view_team, cases:close_approve, cases:assign, cases:reassign, cases:transfer, cases:archive
evidence:delete
people:edit_pii, people:view_sealed, people:merge
checklist:view_all, checklist:uncomplete, checklist:unskip, checklist:reopen, checklist:remove_custom
digital:cancel, lab:cancel, lab:expedite
approve:high, approve:critical
reports:view_team, reports:create, reports:export

Administrator

System management:

All Supervisor permissions, plus:
cases:view_all, cases:unarchive, cases:delete
admin:* (all administration permissions)
approve:override
reports:view_all, reports:schedule

Approval Action Types

Reference for actions that require approval at each risk level.

Low Risk Actions

Action	Permission Required
Add case notes	`approve:low`
Request case summary	`approve:low`
Generate timeline	`approve:low`
Add evidence item	`approve:low`
Update checklist item	`approve:low`

Medium Risk Actions

Action	Permission Required
Document interview	`approve:medium`
Request evidence analysis	`approve:medium`
Submit lab request	`approve:medium`
Update person information	`approve:medium`
Access encrypted PII	`approve:medium`
Generate evidence summary	`approve:medium`

High Risk Actions

Action	Permission Required
Generate search warrant draft	`approve:high`
Submit digital evidence request	`approve:high`
Request specialized resources	`approve:high`
Access sealed records	`approve:high`
Cross-agency data request	`approve:high`

Critical Risk Actions

Action	Permission Required
Arrest recommendation	`approve:critical`
Case closure	`approve:critical`
Cold case transfer	`approve:critical`
DA referral	`approve:critical`
Major status change	`approve:critical`

Configure Access Control — Setting up roles and permissions
Role Permissions — Capabilities by role
Approval Levels — Approval requirements

Permission Types

On this page