Skip to main content
NEXO 4 ERPDocs
Getting StartedNEXO 4 ERP GuideERPNext ModulesBusiness ManagementHow-To GuidesIntegrations
ERP ImplementationData MigrationManufacturingTrading & DistributionHealthcare & HospitalsPharmaceuticals
How-ToImplementationMigrationWebsite
Contact Us!

Users and Roles Overview

Understanding user authentication, role assignment, and access controls.

User Management Principles​

Security and accountability are enforced through a granular role-based access control (RBAC) model.

User Types​

  • System Users: Employees and administrative staff who log in to the desk interface to manage operations.
  • Website Users: External customers, suppliers, or partners accessing the web portal.

Key Concepts​

  • Roles: Pre-defined or custom sets of permissions (e.g., Accounts Manager, Sales User, Stock User).
  • Role Permissions: Define which DocTypes a role can Read, Write, Create, Delete, Submit, or Cancel.
  • User Permissions: Further restrict access based on specific document values (e.g., restricting a salesperson to see only Customers in their assigned territory).

Best Practices for Access Control​

  1. Follow the principle of least privilege—grant only necessary permissions.
  2. Use separate roles for drafting and approving financial transactions.
  3. Enforce strong password policies and two-factor authentication (2FA).