Understanding App Access Toggles

Each user can independently turn on three apps — Kiosk, Workstation, and FabWise (iOS). Any combination is valid.

Why it matters

Different people in your shop need different ways to use FabWise. A welder clocks in at the shared kiosk. An office admin sometimes covers the back parts counter and also clocks at the kiosk. A supervisor uses the iPhone app to check on the floor. A senior fabricator has their own laptop they use for jobs.

FabWise models this with three independent toggles per user — not a "user type." You pick the apps this person needs, and they get them. No work-arounds.

How it works

Every user has three checkboxes on their devices page:

Each toggle is independent. You can mix and match:

• Kiosk + Workstation: a shop worker who clocks in at the kiosk on busy days and uses their phone or laptop on slower ones.
• Kiosk only: a standard shop worker — most workers.
• Kiosk + Workstation, Admin role: the office admin who covers the parts counter and clocks at the kiosk when they do.
• Workstation only: an office worker who tracks tasks but doesn't clock at the kiosk.
• FabWise (iOS) only: a supervisor who monitors from the floor but doesn't clock in.

Where to find it

• Page: any user's devices page
• Path: Admin > Users > (click a user) > Devices
• Who can see it: Account admins

What you'll see

The devices page has one section per app — Kiosk, Workstation, FabWise (iOS), and Admin Console. Each section has its own toggle and the settings that apply to it:

• Kiosk — enable toggle plus the user's 4-digit PIN. PIN is required when kiosk access is on. Workers without an email use this PIN to sign in at the kiosk.
• Workstation — enable toggle plus enrolled passkeys. Only available on the Professional plan; on Starter the toggle is disabled. Once enabled, use Enroll new device to generate an enrollment QR for the user.
• FabWise (iOS) — enable toggle. The user can sign in to the iOS app immediately if they have a password.
• Admin Console — no toggle (role-based). Password lives here because it's the credential for both Admin Console and FabWise (iOS).

What to do

Setting up a typical shop worker

Most workers need just the kiosk:

1. Open the user's Devices page.
2. In the Kiosk section, turn Enabled on. Enter a 4-digit PIN.
3. Save. The worker appears in the kiosk roster on the next refresh.

Setting up a worker with their own laptop

For a senior fabricator or anyone who tracks tasks on their own device:

1. Open the user's Devices page.
2. Turn on Kiosk (if they also clock at the kiosk) and Workstation.
3. Enter a PIN if Kiosk is on.
4. In the Workstation section, click Enroll new device. Send the QR to the worker.
5. They scan it on their device and complete enrollment with their biometric. From then on, they sign in at workstation.fabwise.app with their face or fingerprint.

Setting up a supervisor with the iPhone app

1. Open the user's Devices page. Set Role: Supervisor on the user profile first.
2. In the FabWise (iOS) section, turn Enabled on.
3. Save. The supervisor downloads the FabWise app from the App Store and signs in with their username + password (managed under Admin Console on the same page — see [Roles & Permissions](roles-and-permissions.md) for what the supervisor role can do).

Setting up an admin who also covers the kiosk

The "office admin who clocks at the parts counter" case:

1. Set Role: Admin on the user profile.
2. On the Devices page, turn Kiosk on and enter a PIN.
3. Save.

The admin uses username + password to sign in to the admin console, and types their PIN at the kiosk like any worker.

Common questions

Can a user have Workstation access on Starter?

No. The toggle is disabled on Starter accounts, and the system rejects it at save. Upgrade to Professional to grant Workstation access. The toggle is preserved — if you later downgrade back to Starter, the toggle stays on the user but the user can't sign in to Workstation until you upgrade again.

What happens to Workstation users when I downgrade to Starter?

Their passkey is invalidated and they can't sign in to Workstation. The toggle on the user is preserved, so if you re-upgrade, you only need to re-enroll their passkey (not re-grant the toggle). See [Enrolling Workers for Workstation](enrolling-workers-for-workstation.md).

What if a worker doesn't have an email address?

That's fine. Leave the email field blank, give them a PIN for the kiosk. They use their PIN, not an email, to clock in. If you also grant them admin console access (rare), the system shows you a one-time generated password to hand off to them in person. See [Creating a user without an email](creating-a-user-without-an-email.md).

Related

• [Managing Users](managing-users.md)
• [Roles & Permissions](roles-and-permissions.md)
• [Enrolling Workers for Workstation](enrolling-workers-for-workstation.md)
• [Creating a user without an email](creating-a-user-without-an-email.md)
• [Re-enrolling a worker's passkey](re-enrolling-a-workers-passkey.md)