Access and Permissions | Who Sees What

In plain terms

Access and permissions in Unibuild are set per person: an explicit list of the office pages and the app modules each person can open. It is built for UK trades and specialist contractors of 5 to 300 people. Unlimited users, one monthly figure, a 14-day trial and no card.

How it is built

Separate surfaces first,
then permissions inside them.

The first control is not a permission at all. Staff, clients and subcontractors are served entirely different surfaces, and the access layer returns anyone to their own if they reach for a page that is not theirs.

Signing in: Single sign-on with Microsoft 365 and Google Workspace, with MFA on top of it, enforced for everyone or only for the people you choose. Mobile login additionally takes a PIN as well as the password, which is what lets a shared site tablet be used by several people who each sign as themselves rather than staying logged in as whoever set it up.
Surface separation: Staff use the web portal and the field app. Clients use the client portal. Subcontractors use the subcontractor portal, served by their own controllers with their own template. A URL from one surface, sent or guessed, returns the user to their own dashboard.
Web page permissions: An explicit tree of the menus and sections a person can open, ticked per person. This is more precise than a role template and it is how the construction deployment is run.
App permissions: A separate list, set independently of web access. A supervisor can have the full field app and almost no back office at all.
Sensitive flags: Specific switches on the things that cause trouble: whether a person can see hourly rates, whether they can see other people's timesheets, and whether they can manage anyone else's access.
Priceless documents: On onsite quotes, site-level roles are served a document with no prices on it at all, so a supervisor can raise and progress a quote without ever seeing what it costs you or what you make on it.
Record-level scoping: Clients see their own projects. Subcontractors see their own orders and invoices, constrained by the identifier held against their login, which cannot be changed from the browser. Files in document management sit in company and project folders, opened under the same per-person grants.
Leavers: Deactivation is immediate and blocks login, with the reason written to the login log. Every login, failed login and blocked attempt is recorded with the IP address.

Security posture

Access is granted per person,
page by page.

Single sign-on with Microsoft 365 and Google Workspace, with MFA on top.
Every individual carries an explicit access tree rather than inheriting a role template.

Per person,
not per role

By design

Permissions are granted to the individual, using the role as a starting point. One deployment runs thirteen menu groups across 87 pages, each granted explicitly, which is finer control than most systems in this market allow.

Access controlLive

Single sign-on
and MFA

Standard

Sign in with your Microsoft 365 or Google Workspace account, with multi-factor authentication on top, enforced for every user or only for named people. Accounts lock after repeated failed sign-in attempts, and strong passwords are enforced. Mobile login takes a PIN as well, which is what makes a shared site tablet usable by several people who each sign as themselves. Sign-in is accepted from the UK, and another country is opened for a named person while they travel.

Login securityLive

An audit trail
behind every entry

Standard

Records carry the person, the time, the device and the IP address, appended rather than overwritten, so who did what is answerable months later.

AccountabilityLive

On certifications

Unibuild holds Cyber Essentials Plus and is ICO registered. ISO 27001 certification is in progress. If a certification is a procurement requirement for you, raise it early and we will set out exactly where it stands.

Client testimonial

SME Building Services,
in their own words.

Niki Scarth, office administrator at SME Building Services, standing in the firm’s Croydon office with the SME Building Services mark on the wall behind her — **Niki Scarth**Office administrator, SME Building Services LtdCroydon · on Unibuild since 2023
Read the SME case study

It has always been a pleasure to work with Darshan and his team to create our completely bespoke system, which I can only describe as brilliant.

The system is constantly growing and improving. Whenever we need something added or changed, whether it's a new form that would work better for us or a new idea to improve the way we work, Darshan works his magic and makes it happen!

It has genuinely changed the way we work for the better, improving our record-keeping, automating processes and standardising practices across the company, saving us both time and money.

It's also improved the service we provide to our clients, who love being able to view their job and asset information live, at the click of a button.

Thank you, Unibuild!

Questions

Asked before the access
panels are set up.

Can we control who sees what, person by person?

Yes. Web access is an explicit tree of the pages a person can open, and app access is a separate list, both ticked per person rather than copied from a role. Rates, other people’s timesheets and prices on site documents each have their own switch. It is how Unibuild is run for UK trades and specialist contractors of 5 to 300 people, and the grants are the record of who could see what.

What does it cost?

One monthly figure, quoted in writing, fixed for three years, unlimited users. No per-user charge, so giving every member of staff their own login, with their own grants, costs nothing extra.

Is there a free trial?

Yes, 14 days of the full platform, no card. Set up two people with different grants and see that each gets a different system.

How long does it take to go live?

Most firms go live in about two weeks, in phases. The access panels are set up with you at the start, person by person, and your office manager can be given the panels to run afterwards.

Can we enforce two-factor authentication?

Yes, for every user or only for named people, on top of single sign-on with Microsoft 365 or Google Workspace. Accounts lock after repeated failed sign-in attempts, strong passwords are enforced, and every login, failed login and blocked attempt is recorded.

Last reviewed November 2026