Roles & Permissions

A role is a named set of permissions (for example "Accountant" or "HR"). Every user has a role, and the role decides which menus, pages and buttons that user can see and use.

How it works

Permissions are grouped by module — CRM, HRM, Accounting, Project, POS — plus Staff (users, roles, clients, products, settings).
Your plan decides which modules you can use. If your plan doesn't include a module, its permissions don't appear when you edit a role. Staff permissions are always available.
Each company manages its own roles. You only see and edit your company's roles; other companies never see yours.
You can only give what you have. When you create or edit a role you can assign permissions that your plan allows and that you have yourself.

What the permission names mean

Word	Allows	Example
`manage`	Open the list page and the menu item	manage invoice
`create`	Add new records	create employee
`edit`	Change existing records	edit project
`delete`	Delete records	delete leave
`show` / `view`	Open the details page	show invoice, view project

Permissions worth knowing

Permission	What it does
control timesheet	See and fill timesheets for other employees (otherwise people see only their own time).
project expenses	Project cost reports, project income, payslip-project links and the timesheet report.
view gantt chart	The Gantt chart of a project.
attend_dashboard	The clock-in / clock-out card on the dashboard.
show employee profile	An employee's own profile page.
manage leave	The leave list; approving leave also needs it.
show … dashboard	Each module's dashboard (CRM, HRM, Account, Project, POS).

Create a role

Go to User Management › Role and click +.
Enter a name, for example Sales Manager.
Open each module tab and tick what the role needs. The checkbox in the table header selects the whole module; the checkbox at the start of a row selects the whole service.
Click Create. Assign the role to people from User Management › Users.

Hover a permission to see its exact name. Changes apply the next time the user loads a page.

Rules that keep your company safe

Reserved names: you can't create or rename a role to company, client, customer or vender — the system uses those names for account types.
Built-in roles (marked System) can't be renamed or deleted.
Saving never removes hidden permissions. If a role already has permissions you can't see (for example from a module that is not in your current plan), they are kept when you save.
A role in use can't be deleted. Move its users to another role first.
Two companies may use the same role name, such as "Manager" — each company has its own.

Roles you get automatically

Role	Who	Access
company	Company owner	Every module in the plan, users, roles and company settings.
Employee	New employees (created per company the first time you add one)	Attendance, leave, own profile, assigned projects, tasks and timesheet. You can edit it like any role.
client	Clients you invite to projects (per company)	Their projects, tasks, timesheet, bugs, deals and contracts.
customer / vender	Customer and vendor portals	Their own invoices, proposals, bills and payments.

Troubleshooting

Check the user's role has the permission (for example manage project for the Projects menu).
Check your plan includes the module.
Ask the user to reload the page.

I can't tick a permission when editing a role

Either your plan doesn't include that module, or your own role doesn't have it. Only the company owner (or someone whose role has it) can give it to others.