Roles and Permissions (RBAC)
Security and compliance← View all topics
Included controls
- Predefined roles (Admin, Manager, Salesperson, Accountant, etc.)
- Custom role creation
- Granular permissions by module and action (create, read, update, delete)
- Data-level permissions (by company, branch, project, etc.)
- Permission inheritance
- Permission change auditing
Best practices
- Apply principle of least privilege
- Review permissions periodically
- Use roles instead of individual permissions
- Document roles and responsibilities
- Revoke access for inactive users
- Separate administrative from operational roles
Scope
System allows role and permission configuration at module and action level. Data-level permission configuration (row-level security) may require additional setup.
Frequently asked questions
Can I create custom roles?
Yes, you can create custom roles with specific permissions according to your organization's needs.
How does permission inheritance work?
Roles can inherit permissions from other roles, facilitating complex permission management.
Are permission changes logged?
Yes, all role and permission changes are logged in the audit log with date, user, and change details.