About this guide
One permit record, two day-to-day roles.
This is a how-to guide. It explains the practical steps for using the Permit to work button in Orchestrate: how site teams control permits, and how contractor operatives present permits, upload required evidence and record who is on site.
Use this guide when you already know which permit process your organisation follows, and need to know how to complete that process in Orchestrate. It does not replace your local permit policy, risk assessment, method statement, induction or site rules.
By the end of this guide you will be able to
- Log in to Orchestrate using a password, SSO or the QR-code login flow.
- Open Permit to work from the Home page.
- Find, review, authorise, issue, check and close permits as a site operative or manager.
- Present a permit, upload required data and check people in and out as a contractor operative.
- Recognise when a permit must not be issued, continued or closed.
- Sync permit activity back to Concerto before leaving site.
Access
You will only see the Permit to work tile if your Concerto user has the right permission. If the tile is missing, ask your manager or administrator to check your role.
Part 1
Getting set up.
Install Orchestrate, accept the first-run prompts, log in, then open the Permit to work area from Home.
1.1 Install and open Orchestrate
- Open your app store. Use the App Store on iOS or Google Play on Android.
- Search for Concerto Orchestrate and install it. The publisher is Bellrock.
- Open the app. The app starts first-run onboarding before sign-in.
1.2 First-run onboarding
The first time you open Orchestrate, the app asks for the permissions it needs. You can change these later in your phone's Settings, but granting them now avoids interruptions at the gate or work area.
- Camera. Required for scanning QR codes, photographing permit evidence and capturing documents. Tap Allow.
[Screenshot: Onboarding — Camera permission]
Filename: images/04-onboarding-camera.png - Location. Used to confirm site attendance and support check-in. Choose While using the app.
[Screenshot: Onboarding — Location]
Filename: images/05-onboarding-location.png - Notifications. Lets Concerto alert you to permit updates, rejected information and site messages. Recommended.
[Screenshot: Onboarding — Notifications]
Filename: images/06-onboarding-notifications.png - Biometric sign-in. Enable Face ID, Touch ID or fingerprint so you do not need to retype your password every time. Optional but recommended.
[Screenshot: Onboarding — Biometric]
Filename: images/07-onboarding-bio.png
Tip
Camera and location permissions matter for Permit to Work. Without them you may not be able to scan a permit QR code, upload photo evidence or complete check-in at the point you need it.
1.3 Logging in
You will need three things from your manager or administrator: a URL for your organisation's Concerto, a login name and a password.
- Enter the URL. Type it exactly as supplied. The app checks it and shows a green tick when it is valid.
- Enter your login name. This is usually your work email address or a short user code.
- Enter your password. Tap the eye icon to reveal it if you need to check what you have typed.
- Tap Login. You may see "Concerto is warming up. This may take a little longer than usual." This is normal the first time of the day.
images/01-login.pngIf your organisation uses single sign-on
Tap Sign in with SSO instead of entering a password. You will be taken to your organisation's sign-in page; finish there and you will be returned to Orchestrate.
If your device was pre-configured
Tap Scan QR code on the login page and point the camera at the QR code your administrator has provided. The URL and login name fill in automatically.
Multi-factor sign-in — Login with a QR code
If your organisation requires multi-factor authentication, the simplest way to sign in is with the QR code flow shown on the Login page. Use the Concerto website to generate a QR code, then scan it from the app.
- Log in to the Concerto website. Open the website on a desktop or laptop and sign in with your credentials.
- Click your initials. Find your initials or profile image in the top right of the home page.
- Click "Scan to Login to App". Select the button from the dropdown menu. A QR code appears on the web page.
- Scan the QR code. On your phone, tap Scan QR code on the Orchestrate Login page, then point your camera at the QR code on the web page. You are signed in.
images/02-qr-login.pngimages/02a-web-login.pngimages/02b-web-qr.pngTip
Once you have signed in with a QR code on a device, biometric sign-in lets you skip the full login steps next time.
Forgotten password
Tap Forgotten password? on the login page, enter your URL and login name, then tap Reset Password. You will receive an email with instructions.
Accepting the Terms and Conditions
The first time you log in, you may be asked to read and Accept the Concerto Terms and Conditions. You will only see this again if the terms change.
Heads up
If you mistype your password too many times your account may be locked. Speak to your manager or administrator to get it unlocked.
1.4 The Home page
After logging in you land on the Home page. You will only see the tiles your role has access to. For this guide, the only tile you need is Permit to work.
images/08-home.pngThe top bar
- "Orchestrate" wordmark — shows you are on the Home page.
- Sync spinner — turns when Orchestrate is sending or receiving data.
- Messages — opens messages from your office or site team.
- Avatar / menu — your profile, settings, help and sign-out.
1.5 Open Permit to work
- From Home, tap Permit to work. The Permit to Work landing page opens.
- Check the tabs or filters at the top. Your organisation may group permits by status, site, contractor, date or action required.
- Use search if you know the reference. Search by permit number, site, contractor name or work area, depending on what your configuration supports.
images/09-permit-landing.pngPart 2
Before you touch a permit.
Permit to Work is a control process. Before you authorise, issue or present a permit in the app, make sure the real-world work is ready to be controlled.
What you need
| You are | Have ready before you start |
|---|---|
| Site operative / manager | Site, work location, contractor details, planned date and time, work description, required isolations, hazards, permit category, approval route and any documents your process requires. |
| Contractor operative | Permit reference or QR code, company details, named operatives, RAMS or method statement evidence, accreditation evidence if requested, emergency contact details and any photos or documents required before access. |
Status words you may see
Your organisation can configure permit statuses. The wording may differ, but most processes use a version of this flow:
| Status | What it means |
|---|---|
| Draft / Requested | The permit exists but has not yet been approved for issue. |
| Awaiting authorisation | A site authorised person must review the details and decide whether work can proceed. |
| Authorised | The permit has passed review and can be issued when the site is ready. |
| Issued / Active | The contractor has been issued the permit and the controlled work may proceed within the stated limits. |
| Suspended | The permit is temporarily stopped. Work must not continue until it is reissued or reactivated. |
| Closed / Complete | The work and checks are complete and the permit has been handed back or closed. |
| Rejected / Expired | The permit cannot be used. Review the reason, correct the issue or raise a new permit. |
Safety stop
Do not issue or continue a permit if the scope, people, work location, isolation, risk controls or supporting evidence do not match the work about to happen. Stop and escalate through your site process.
Part 3
Site operative / manager flow.
Use this flow when you are responsible for checking permit requests, authorising them, issuing them to contractors and confirming site attendance.
3.1 Find the permit
- Open Permit to work. Start from Home and tap the tile.
- Choose the right list. Look for permits awaiting review, awaiting authorisation, ready to issue or active on site.
- Search or filter. Use the permit reference, contractor, site, work area or date to narrow the list.
- Tap the permit row. The permit detail page opens.
images/10-permit-list.png3.2 Review the permit
Review the permit before you authorise or issue it. The detail page should give you enough information to decide whether the work is correctly controlled.
- Read the work summary. Confirm the site, location, work description, contractor and planned time window.
- Check the permit type and controls. Make sure the permit category matches the work and that required controls are listed.
- Review hazards and isolations. Check asbestos, fire, electrical, confined-space, roof-access or other site-specific warnings where relevant.
- Open attachments. Review RAMS, insurance, method statements, accreditations, induction records or photos if they are required.
- Check mandatory fields. Orchestrate will usually block progress if required data is missing. Treat missing data as a process issue, not a formality.
images/11-permit-detail.png3.3 Authorise a permit
- Open a permit that is ready for review. Check it from top to bottom first.
- Tap Authorise or the equivalent action. The action may be in the page footer or an actions menu, depending on your configuration.
- Complete any authorisation questions. These may confirm isolations, risk controls, site readiness or named responsible people.
- Add comments if needed. Use comments to record conditions, limits or why you have approved with a specific restriction.
- Confirm the action. The permit status updates and syncs back to Concerto.
Do not rubber-stamp
Authorising a permit records that the site has accepted the controls for the stated work. If the details are wrong, reject or return it for correction rather than authorising it.
3.4 Issue a permit
Issuing is the point where the permit is handed to the contractor for controlled work. Only issue it when the contractor, location and site conditions match the permit.
- Open an authorised permit. Confirm the permit is still within its planned date and time window.
- Check the contractor and people. Confirm the operative or team presenting on site matches the permit.
- Review final conditions. Confirm any isolations, access restrictions, PPE or supervision arrangements are in place.
- Tap Issue. Complete any final questions, signature prompts or acknowledgements.
- Confirm the status. The permit should move to Issued, Active or the equivalent live status.
images/12-permit-issue.png3.5 Check permit progress
- Open the active permit. Use the active list, search or site filter.
- Check the activity history. Look for authorisation, issue, contractor upload, check-in and check-out entries.
- Review newly uploaded evidence. Open photos, documents or answers submitted by the contractor.
- Act on warnings. Missing evidence, expired time windows or rejected uploads should be resolved before work continues.
3.6 Check people in and out
Use check-in and check-out to keep the site record aligned with who is present under the permit.
- Open the permit. Confirm it is the right permit for the people at the gate or work area.
- Open the people or attendance section. The label may be People, Attendance, Check in or similar.
- Confirm each person. Check names, company and any mandatory accreditation or induction requirements.
- Tap Check in. Confirm the prompt. The app records the attendance time.
- At the end of the visit, tap Check out. Confirm everyone has left the controlled area before closing the permit.
images/13-permit-attendance.png3.7 Close or complete permit checks
- Open the active permit. Check the work status and attendance first.
- Confirm the contractor has handed back the permit. The contractor should have checked out and uploaded final evidence where required.
- Complete close-out questions. These may confirm the work area is safe, isolations are restored, waste is removed, alarms are reinstated or the site is secure.
- Add final comments or photos. Record anything useful for audit or follow-up.
- Tap Close, Complete or the configured close-out action. Confirm the status changes to closed or complete.
Before closing
Do not close the permit while people are still checked in, evidence is missing, the work area is unsafe or controls have not been restored. Keep the permit open, suspend it or escalate according to your site procedure.
Part 4
Contractor operative flow.
Use this flow when you arrive on site to present a permit, supply required evidence and record when you and your team are on site.
4.1 Present a permit
- Open Orchestrate and log in. Use biometrics if you have already set them up.
- Tap Permit to work. Open the permit area from Home.
- Find the permit. Search by reference, scan the permit QR code if provided, or use the list of permits assigned to you or your company.
- Open the permit. Show the site operative or manager the permit detail page if asked.
images/14-contractor-present.png4.2 Read and accept conditions
- Read the permit summary. Confirm the site, work area, task, date and permit type match the job you are about to do.
- Read the conditions and controls. Pay attention to isolations, restricted areas, hot-work controls, PPE, supervision, time limits and emergency arrangements.
- Raise any mismatch immediately. If the permit does not match the work, do not proceed. Speak to the site contact.
- Tap Accept or complete the acknowledgement. This records that you have read and accepted the permit conditions.
Stop if it does not match
A permit only controls the work described on it. If the work location, task, people, timing or controls are wrong, stop and ask the site team to correct or reissue the permit.
4.3 Upload required data
The permit may ask you to upload evidence before it can be issued, while work is active, or before it can be closed.
- Open the evidence, documents or questions section. The label depends on how your permit template has been configured.
- Answer required questions. Complete all mandatory fields. Required fields are usually marked and will block submission if empty.
- Attach photos or files. Use the camera for live photos, or choose an existing file if your device and policy allow it.
- Check image quality. Make sure text is readable, the full document is visible and the photo proves what it needs to prove.
- Tap Save, Upload or Submit. Wait for the app to confirm the evidence has been saved or queued for sync.
images/15-contractor-upload.png4.4 Check in to site
- Open the permit attendance section. This may be called Check in, Attendance or People.
- Select yourself and your team members. Add or confirm names if the permit allows it.
- Confirm any required declarations. You may need to confirm induction, PPE, RAMS, emergency arrangements or site rules.
- Tap Check in. The app records the time and, where enabled, the location.
- Confirm the permit shows you as checked in. If it does not, speak to the site contact before starting work.
4.5 Check out and hand back
- Stop work safely. Leave the work area safe and follow the permit conditions for handback.
- Upload final evidence if required. Add photos, readings, completion notes or handback documents.
- Open the attendance section. Select yourself and any team members leaving site.
- Tap Check out. Confirm the prompt so the site record shows you have left.
- Tell the site contact the work is ready for close-out. The site operative or manager may need to inspect and close the permit.
images/16-contractor-checkout.png4.6 Fix missing or rejected information
- Open the permit. Look for a warning, rejection reason or required action badge.
- Read the reason carefully. It may name the missing document, unclear photo, expired accreditation or incomplete answer.
- Replace or add the information. Upload a clearer file or complete the missing field.
- Submit again. Wait for the status to update or for the site team to review it.
Part 5
Working safely and staying compliant.
The app records the permit process, but the safety decision still belongs to the people on site. Use Orchestrate to support that decision, not to bypass it.
When not to issue or continue a permit
- The permit location, task, date or people do not match the work being requested.
- Required evidence is missing, expired, unreadable or rejected.
- The required isolation, access control, PPE, supervision or emergency arrangements are not in place.
- A required authorised person is unavailable.
- The permit has expired, been suspended or been superseded by a new permit.
- Conditions have changed on site since the permit was authorised.
Evidence quality
| Evidence type | Good practice |
|---|---|
| Photo | Take it in good light, include enough context, avoid blur and make sure the image proves the control or condition. |
| Document | Upload the full document, not just the first page, if the full document is required by your process. |
| Certificate / accreditation | Make sure the name, expiry date, issuing body and certificate reference are readable. |
| Comment | Write what a reviewer will need later: what happened, where, when and what action was agreed. |
| Signature / acknowledgement | Only sign for what you have read, checked and are authorised to confirm. |
Audit trail
Permit actions are part of the site audit trail. Use clear comments, accurate times and readable evidence so another person can understand the decision later.
Part 6
Syncing and offline behaviour.
Permit data should be current. Some actions may be available offline, but issuing, checking attendance and closing permits should be synced before you rely on the record.
What to expect
- Sync runs in the background whenever the device has a connection.
- The sync spinner in the title bar shows Orchestrate is talking to Concerto.
- Saved locally means the device has the update but Concerto may not have it yet.
- Sent, synced or no warning means the record has normally reached Concerto.
Before you leave site
- Open the permit list or permit detail page. Check for any warning badges or pending uploads.
- Tap the sync button if available. Wait for the spinner to finish.
- Open the permit again. Confirm the latest status, attendance and evidence are visible.
- Resolve any failures before leaving. If you cannot resolve them, tell the site contact or manager while you are still on site.
images/17-permit-sync.pngConnectivity
If the site has poor signal, move to a known connection point before relying on a permit status change. A permit that is saved on your phone but not synced may not be visible to the office or other site users yet.
Reference
Quick reference card.
A one-page summary for the two common day-to-day permit flows.
Site operative / manager daily flow
- Open Orchestrate and log in.
- Tap Permit to work.
- Review permits awaiting authorisation or issue.
- Check scope, people, evidence, hazards and controls.
- Authorise only when the permit is correct.
- Issue only when the site and contractor are ready.
- Check people in and monitor active permits.
- Check people out, confirm handback and close the permit when safe.
- Sync before leaving site.
Contractor operative daily flow
- Open Orchestrate and log in.
- Tap Permit to work.
- Find or scan the permit.
- Read the permit conditions and check the details match the job.
- Upload required evidence and complete required questions.
- Check in before starting work.
- Work within the permit limits.
- Upload final evidence, check out and hand back to the site contact.
- Sync before leaving site.
Common actions
| Action | Use it when |
|---|---|
| Authorise | The permit has been reviewed by an authorised site person and the controls are acceptable. |
| Issue | The contractor is present, the site is ready and the work can start under the permit. |
| Reject / Return | Details or evidence are missing, wrong or unclear. |
| Suspend | Work must temporarily stop but the permit is not yet closed. |
| Check in | A named operative is entering site or the controlled work area under the permit. |
| Check out | A named operative is leaving site or the controlled work area. |
| Close / Complete | The work has been handed back, the area is safe and all required evidence is complete. |
Troubleshooting
If something does not look right.
| What you are seeing | What to try |
|---|---|
| Cannot log in | Check the URL is exactly as supplied. Use SSO or QR login if that is your organisation's process. Reset your password if needed. |
| The Permit to work tile is missing | Your user does not have the permission. Ask your manager or administrator to check your role. |
| The permit is missing | Pull down to refresh, clear filters, search by reference and check you are looking at the correct site or date range. |
| A permit will not authorise or issue | Look for required fields, missing evidence, expired dates, incomplete declarations or a status that does not allow that action. |
| Upload fails | Check signal, file size and file type. Try again on Wi-Fi or upload a clearer photo if the original image is too large or unreadable. |
| Camera or QR scan does not work | Allow camera permission in phone Settings, clean the QR code, use the torch or search by permit reference instead. |
| Cannot check in | Confirm the permit is issued or active, the person is named or allowed, location permission is enabled and required declarations are complete. |
| Cannot check out | Check whether required close-out questions or uploads must be completed first. Ask the site contact if your attendance record needs correction. |
| Status has not updated for someone else | Sync your device and ask the other user to refresh. If signal is poor, move to a better connection point. |
| Permit expired while work is ongoing | Stop work and contact the site manager. Do not continue under an expired permit unless your site process has formally extended or reissued it. |
Help
Getting more help.
If you need help, provide enough detail for someone else to find the permit and understand the problem quickly.
- Your site contact or manager — for whether work should proceed, whether a permit can be issued, or whether a person can remain on site.
- Your Concerto administrator — for missing tiles, permissions, locked accounts, role setup and permit template configuration.
- Bellrock Service Desk — for app faults that cannot be resolved by your manager or administrator.
Information to include
- Permit reference.
- Site and work location.
- Your login name and company.
- The action you were trying to complete.
- The exact warning or error message.
- Whether the device had signal and whether sync had completed.