Roles and permissions: who sees and who writes what

See in one table which screens the Customer Admin, Accountant, Coordinator, Branch Manager and Sales Representative roles see and where they can write.

Updated

Every user has a role and, depending on the role, assigned branches. The menu shows only the screens your role can open. In the table, W can write, R can only read and — does not see the screen at all.

Role × screen table

ScreenCustomer AdminAccountantCoordinatorBranch ManagerSales Representative
Dashboard, Target Tracking, Remaining KPIRRRRR
Data EntryW—WWW (own name only)
ImportW—WW—
Targets (branch)WRWR—
Personnel targetsWRWWR (My Targets)
PremiumRR———
Personnel PremiumRRRRR (My Premium)
Entitlements, Clawbacks, Recalculation, ReconciliationWW———
Cash register or LedgerWW—W (own branch)—
EmployeesWRWW—
BranchesWRRRR
Periods, Users, SettingsW————

Scope

  • The Customer Admin and the Accountant see all branches.
  • The Coordinator sees the branches assigned to them and the Branch Manager sees their one branch.
  • The Sales Representative sees their own branch and enters records in their own name only; "My Targets" and "My Premium" contain only their own row.

Details

  • Cash register and Ledger: the Branch Manager writes only in their own branch and cannot approve a cash day; in the ledger they do not see rows from entitlements or head office entries. Cash approval and transfers between branches belong to the Customer Admin and the Accountant.
  • Closing a period, inviting users, editing a branch card and Settings: the Customer Admin only.
  • Notifications exist for every user; role and branch scope decide their content.
  • Export is not a separate permission: a role that can see a screen can also download that screen's report, limited to its branch scope.
  • A screen the template has no use for (for example Premium when there is no commission program) is hidden from every role.
  • Platform and channel administrators do not see customer screens; they have their own panel.

Permissions are enforced on the server

A screen missing from the menu is not the only safeguard: the same rules apply on the server. An address you may not open sends you to the Dashboard, and an unauthorised request is refused.

Roles are assigned on the Users screen. Next: Users, employees, branches and periods.