Roles and permissions
Set the menus, buttons and data scope of each role.
Menu Settings → Roles & Permissions. A role sets three things for each menu.
1. Basic permissions
| Permission | Meaning |
|---|---|
| View | The menu appears and its data can be opened |
| Create | Create new data |
| Update | Change data |
| Delete | Deactivate or delete data |
2. Special permissions
For important actions such as Approve, Reject, Cancel, Print, Post, Pay, Void, Close period, Import. A special permission counts only when the role also has View on that menu.
3. Data scope
| Scope | Data visible |
|---|---|
| Self | Only their own data |
| Subordinates | Their own + everyone reporting to them, directly or not |
| Organization unit | Their own + everyone in their unit and its sub-units |
| Company / All | All company data |
Subordinates and units come from the current employee assignment (manager and unit). See Employees.
Creating a role
- Press Add role, give it a code and a name (for example
PURCHASING, "Purchasing"). - Tick the menus, permissions and data scope.
- Save. Members with this role see their new menus on their next request.
Safety rules
- You can only grant permissions and scopes you have yourself.
- You cannot change your own role.
- The Owner role is locked: it cannot be changed or deleted.
- A role still used by members cannot be deleted.
Example extra roles
| Role | Menus and permissions |
|---|---|
| Purchasing | Purchase Orders (view, create, update, cancel, print), Vendors |
| Manager (purchase request approver) | Purchase Requests (view, approve, reject) |
| Legal officer | Legal Desk (view, update) |
| Finance (pays claims) | Claim Payment (view, pay, reject) |
Last updated 28 Oct 2026