Roles & Permissions

Configure role-based access control (RBAC) in Alpha.

RBAC Concepts

Roles

Named sets of permissions:

• Sales Manager
• Warehouse User
• Administrator

Permissions

Specific access rights:

• View Products
• Create Orders
• Delete Invoices

Default Roles

Managing Roles

Creating Roles

1. Go to Administration > Roles
2. Click Add Role
3. Name the role
4. Select permissions
5. Save

Editing Roles

1. Open role
2. Add/remove permissions
3. Save
4. Affects all users with role

Deleting Roles

1. Reassign users to other roles
2. Delete role
3. Cannot delete if users assigned

Permission Categories

By Module

Permission Levels

Role Hierarchy

Example Structure

Administrator (all permissions)
├── Manager Roles (department permissions)
│   ├── Sales Manager
│   ├── Warehouse Manager
│   └── Finance Manager
└── User Roles (limited permissions)
    ├── Sales User
    ├── Warehouse User
    └── Viewer

Assigning Roles

Single Role

Users typically have one role:

1. Open user
2. Select role
3. Save

Multiple Roles

If needed:

1. Create combined role
2. Or assign multiple
3. Permissions combine

Testing Roles

Before Deployment

1. Create test user
2. Assign role
3. Test access
4. Verify restrictions

Best Practices

Principle of Least Privilege

• Grant minimum needed access
• Start restrictive
• Add permissions as needed

Role Maintenance

• Review roles quarterly
• Remove unused permissions
• Document role purposes

Related