Roles & Permissions

Configure role-based access control (RBAC) in Alpha.

Understanding Roles

Roles are named collections of permissions that define what actions users can perform in the system. Instead of assigning individual permissions to each user, you assign roles that bundle related permissions together.

How Roles Work

1. Create a role with the permissions needed for a job function
2. Assign the role to users who perform that function
3. Users inherit all permissions from their assigned roles
4. Update the role to change permissions for all users with that role

System Roles vs Tenant Roles

Alpha has two types of roles:

System roles are assigned by platform administrators. Tenant roles are managed within your organization.

Default Roles

Managing Roles

Creating Roles

1. Go to Administration > Roles
2. Click Add Role
3. Name the role
4. Select permissions
5. Save

Editing Roles

1. Open role
2. Add/remove permissions
3. Save
4. Affects all users with role

Deleting Roles

1. Reassign users to other roles
2. Delete role
3. Cannot delete if users assigned

Permission Categories

Alpha organizes permissions by functional module. When creating or editing roles, you select permissions from these categories.

Application Permissions

Core system and administration permissions:

Products Permissions

Finance Permissions

Permissions for financial operations:

Clients

Estimates

Purchase Orders

Sales Orders

Invoices

Suppliers

Inventory Permissions

Production Permissions

Projects Permissions

Configurator Permissions

For product configuration features:

Asset Management Permissions

Permission Levels

When viewing permissions in the role editor, they follow standard CRUD operations:

Role Hierarchy

Example Structure

Administrator (all permissions)
├── Manager Roles (department permissions)
│   ├── Sales Manager
│   ├── Warehouse Manager
│   └── Finance Manager
└── User Roles (limited permissions)
    ├── Sales User
    ├── Warehouse User
    └── Viewer

Assigning Roles

Single Role

Users typically have one role:

1. Open user
2. Select role
3. Save

Multiple Roles

If needed:

1. Create combined role
2. Or assign multiple
3. Permissions combine

Testing Roles

Before Deployment

1. Create test user
2. Assign role
3. Test access
4. Verify restrictions

Best Practices

Principle of Least Privilege

• Grant minimum needed access
• Start restrictive
• Add permissions as needed

Role Maintenance

• Review roles quarterly
• Remove unused permissions
• Document role purposes

Roles vs Access Control

It's important to understand the difference between roles and access control:

A user needs both appropriate role permissions and resource access to perform an action on a specific resource.

Related