Users and Roles Overview

Understanding user authentication, role assignment, and access controls.

User Management Principles

Security and accountability are enforced through a granular role-based access control (RBAC) model.

User Types

• System Users: Employees and administrative staff who log in to the desk interface to manage operations.
• Website Users: External customers, suppliers, or partners accessing the web portal.

Key Concepts

• Roles: Pre-defined or custom sets of permissions (e.g., Accounts Manager, Sales User, Stock User).
• Role Permissions: Define which DocTypes a role can Read, Write, Create, Delete, Submit, or Cancel.
• User Permissions: Further restrict access based on specific document values (e.g., restricting a salesperson to see only Customers in their assigned territory).

Best Practices for Access Control

1. Follow the principle of least privilege—grant only necessary permissions.
2. Use separate roles for drafting and approving financial transactions.
3. Enforce strong password policies and two-factor authentication (2FA).