Security
Manufacturing scheduling software security — roles, audit logs & data isolation
Built to pass your IT review. Here's how CoreScheduler handles access, accountability, and your data.
Role-based access control
A spectrum of roles from Owner and Admin through Scheduler and Operator to view-only Viewer. Each user gets exactly the permissions their job requires — no shared logins, no all-or-nothing access.
Audit logging
Schedule changes and administrative actions are recorded with actor and timestamp. When someone asks 'who moved this job?', the answer is a lookup, not an investigation.
Tenant data isolation
Each company's data is fully isolated from every other tenant. Your schedules, resources, and history are yours alone.
Encryption in transit
All traffic between browsers, the shop floor, and CoreScheduler's servers is encrypted with TLS. Nothing moves in the clear.
Session security
Authenticated sessions are managed securely with protection against session hijacking, and access is revocable per user the moment someone leaves the team.
Least-privilege by default
New users start with the minimum access that makes sense, and elevation is a deliberate admin action — not a default.
Permissions at a glance
| Role | Schedule | Resources | Users | Audit log |
|---|---|---|---|---|
| Owner / Admin | Full control | Full control | Manage | View |
| Scheduler | Plan & publish | Edit | — | View |
| Operator | Execute & update tasks | View | — | — |
| Viewer | View only | View | — | — |
Want the deeper story on roles and audit trails? See the Roles & Security feature page.