Roles

There are multi roles defined in the system to adapt workflows of business. The user can have multiple roles in same time.

To define a new role, go to Settings ‣ Users & Companies ‣ Roles

A role is combined from multiple groups, that specify access rights and record rules for applications in system. Activate the developer mode, then go to Settings ‣ Users & Companies ‣ Groups.

Groups

Groups are created to define rules to models within an application.

Under Users, have a list of the current ones. The ones with administrative rights are shown in black.

Inherited means that users added to this application group are automatically added to the following ones. In the example below, users who have access to the group Administrator of Sales also have access to Website/Restricted Editor and Sales/User: All Documents.

Important

Remember to always test the settings being changed in order to ensure that they are being applied to the needed and right users.

The Menus tab is where you define which menus (models) the user can have access to.

Access Rights rules are the first level of rights. The field is composed of the object name, which is the technical name given to a model. For each model, enable the following options as appropriate:

• Read: the values of that object can be only seen by the user.

• Write: the values of that object can be edited by the user.

• Create: values for that object can be created by the user.

• Delete: the values of that object can be deleted by the user.

As a second layer of editing and visibility rules, Record Rules can be formed. They overwrite, or refine, the Access Rights.

A record rule is written using a Domain. Domains are conditions used to filter or searching data. Therefore, a domain expression is a list of conditions. For each rule, choose among the following options: Read, Write, Create and Delete values.

Important

Making changes in access rights can have a big impact on the database. For this reason, we recommend you to contact your system administrator, unless you have knowledge about Domains configuration.