Skip to main content

I Cannot See the Menu / No Permission

Problem: "Dashboard / business menus / admin menu not visible, 403 error"
Severity: High
Cause: Permission / Role / Tenant mismatch

Quick Diagnosis​

Symptom:
├─ Menu missing → Role issue (wrong role assigned)
├─ 403 Forbidden error → Permission guard issue
├─ Different tenant data visible → Tenant isolation issue
└─ Can't access admin panel → SUPER_ADMIN role required

Solution 1: Role Check​

Check Your Current Role​

In app:

  1. Top-right corner → Profile menu

  2. My Profile or Settings

  3. "Current Role" → What is displayed?

    Expected by menu:
    ├─ Organization / Situation Analysis / Strategy / Goals & Tracking menus → role + scope + plan dependent
    ├─ Settings menu → ADMIN / GROUP_ADMIN / SUPER_ADMIN (or granted permission)
    ├─ Admin menu (/admin/*) → SUPER_ADMIN only
    └─ Dashboard → All authenticated roles

Check Expected Role vs Assigned​

MenuRequired Role
DashboardMEMBER+
My OKRsMEMBER+
Organization / Situation Analysis / Strategy / Goals & TrackingGranted by role + org scope + plan
Settings → UsersAuthorized roles including Strategy Manager; manageable user levels are checked separately
Settings → Organization SettingsADMIN / GROUP_ADMIN / SUPER_ADMIN
Admin (/admin/*)SUPER_ADMIN

If your role doesn't match: → Contact ADMIN, request role change

Solution 2: Permission Guard Issue​

403 Forbidden Error​

Scenario: "Menu visible but clicking gives 403"

Root Causes​

1. Role changed recently?
   → Browser cache issue (Try refresh)

2. Tenant switched?
   → Different tenant, different permissions
   → Check top-left tenant selector

3. Session expired?
   → Login again, new session

Fix​

  1. Hard refresh: Ctrl+Shift+R (Windows) / Cmd+Shift+R (Mac)
  2. Browser cache clear:
    • Settings → Clear browsing data
    • Select "Cookies and cached images"
    • Refresh
  3. Logout/Login:
    • Logout (Top-right → Logout)
    • Login again
    • Check if menu visible

Solution 3: Tenant Mismatch​

Symptom​

"I see another tenant's data" / "Wrong organization?"

Root Cause​

Tenant isolation issue or wrong tenant switch.

Fix​

  1. Check Top-left Tenant Selector
  2. Is correct tenant selected?
  3. If not, select correct tenant
  4. Dropdown shows tenant name: "{Company Name}"

If you are in wrong tenant:

  • Select Correct tenant
  • New session starts
  • Permissions are tenant-specific

Solution 4: Admin Panel Access​

Problem​

"Admin menu not visible"

Requirements​

SUPER_ADMIN role:

RoleAdmin Access
SUPER_ADMIN✅ All tenants
ADMIN❌ No access (/admin/*)
STRATEGY_MANAGER❌ No access
TEAM_LEAD❌ No access
MEMBER❌ No access

If No SUPER_ADMIN Role​

  1. Contact your tenant admin/support owner
  2. Share exact page and reason
  3. If needed, request escalation to a SUPER_ADMIN

Solution 5: Separate read and write scope​

Team Leads and Members can read OKR/KPI/strategy information within company scope. Team Leads write within the units they lead and their descendants; Members update only the permitted progress fields of their own key results/initiatives.

Confidential OKRs and individual performance follow different rules. Team Leads see individual performance only in their led subtree; Members see only their own. Being assigned to a unit does not automatically reveal confidential records.

Not being able to read another unit's general information and not being able to edit its records are different problems. Before raising a role, check the record type, company, confidentiality and write scope.

Solution 6: KPI actions​

SymptomLikely cause and fix
No Goals & Tracking → KPI Tracking menuThe module may be hidden in the tenant menu configuration, or your role lacks KPI:VIEW. Contact an Admin.
A KPI is missing from the list but visible in a reportThe KPI is outside your scope; because you can view the report, you can open the KPI from the report. The list only shows KPIs in your scope.
The measurement form is not shownMeasurement authority comes from the KPI, not the report: you must be the KPI's responsible, the leader of the owner or a parent unit, or hold an administrator role. Retired KPIs accept no measurements.
No Add KPI button in a reportThe report's planning period is closed (KPI list locked) or you cannot edit the report. You can still enter measurements in KPI Tracking.
"Plan limit reached"The number of active KPIs is at max_kpis. Retire an unused KPI or review effective entitlements with your administrator.
A KPI cannot be deletedKPIs with usages or measurements cannot be deleted; use Retire.
Cannot retire or change the owner unitThese actions require authority on the owner unit; being the KPI's responsible is not enough.
The success criteria editor is read-onlyEditing criteria requires measurement authority and the KPI edit permission. A KPI opened from a closed report shows the criteria at closing and cannot be edited.
A planning period cannot be activatedThe tenant already has an active planning period; close it first.
An OKR cycle cannot be activatedThe parent planning period is not active, or another OKR cycle of the same periodicity (annual/quarterly) is active.
A planning period cannot be closedIt contains an active OKR cycle (move it to Review or Completed first), or the cycle exceeds the closing limit; on error nothing changes.
A report in a closed cycle cannot be deleted or editedA closed report keeps its closing snapshot; it cannot be deleted and its KPI list cannot change. A closed cycle cannot be reopened.

See KPI Tracking.

Verification Checklist​

Before contacting support:

✓ Correct role assigned?
  □ Check profile

✓ Browser cache cleared?
  □ Ctrl+Shift+R

✓ Correct tenant selected?
  □ Check top-left dropdown

✓ Logged out and back in?
  □ Logout → Login

✓ Still not working?
  → Contact ADMIN + describe symptom

Contact ADMIN​

If still no access:

  1. ADMIN contact: Find ADMIN in Users list

  2. Message content:

    "Hi, I can't access [MENU/FEATURE].
    Current role: [ROLE]
    Needed for: [REASON]
    Error: [ERROR MSG if any]"

  3. ADMIN actions:

    • Verify role assignment
    • Check permission tables
    • Update if needed
    • Notify you

Common Mistakes​

❌ Mistake: "Browser tab open old session, didn't refresh"
✅ Fix: Hard refresh (Ctrl+Shift+R)

❌ Mistake: "Switched tenant, expecting old tenant's data"
✅ Fix: Each tenant is completely isolated. New start in new tenant.

❌ Mistake: "MEMBER role requesting admin panel"
✅ Fix: Impossible. /admin/* is SUPER_ADMIN-only.

System Limitations (By Design)​

These are intentional:

✅ Good (Secure):

  • Can't see other tenant's data (isolation)
  • Can't access /admin/* without SUPER_ADMIN role (security)
  • Cannot write outside your scope; confidential OKRs and individual performance have separate visibility rules

See also​