Description: This tool allows you to define access levels and specific permissions for each user group using the platform, controlling what they can view, modify, or delete.
What is it for? (Practical examples)
Use User Role Management to:
- Define work permissions: Create a "Junior Salesperson" role that can only view data but cannot modify or delete it, preventing operational errors.
- Ensure data privacy: Set up a "Sales Agent" role that, within the Clients module, sees only the records assigned to them, without accessing the entire company database.
- Optimize the interface: Customize the navigation menu for the "Secretary" role by removing modules they don't need (e.g., Development or Advanced Billing), making software use faster and more focused.
Main Features
- Creation of Custom Roles: It is possible to create new roles beyond the predefined standard ones (such as Admin) to tailor permissions to the organization's specific needs.
- Control of Data Operations: Granular definition of basic permissions:
- Disable the ability to create and modify data.
- Disable the ability to delete data.
- Enable the ability to transfer data ownership (assign a record to another user).
- Sidebar Menu Customization: Allows reorganization of the entire side navigation menu via drag-and-drop, hiding unnecessary items and adding dividers for better visual organization.
- Data Viewing Restrictions: For each main module, it is possible to choose whether users with that role can view all data in the system or only the data they own.
- Interface Element Management: Control over the visibility of Dashboard widgets and Topbar elements (top bar), such as notifications, support, credits, or additional tools (e.g., AI, Changelog).
- Module Tabs Management (Plugins): Allows hiding or showing specific tabs within record edit pages, useful for integrations or advanced features.
How to configure
Role configuration is done through a series of tabs and options within the role edit page.
1. Details and General Permissions
| Field/Option | Description | Note |
|---|---|---|
| Name | Identifying name of the role (e.g., "Manager", "Technical Support"). | The Admin role name (static) is not editable. |
| Description | Brief explanation of the role's purpose. | |
| Disable data creation and modification | If checked, users can only view records. | |
| Disable data deletion | If checked, users cannot delete any records. | |
| Enable data transfer | Allows users to assign record ownership to other colleagues. |
2. Data Viewing (Module Limitations)
For modules managing records (e.g., Contacts, Campaigns), you can set the data access level:
| Option | Effect |
|---|---|
| View all data | The user sees all records in the system. |
| View only own data | The user sees only records they own. |
3. Sidebar Menu
If the Custom menu option is enabled, the menu management area via drag-and-drop is activated:
- Current menu: Items that will be visible to users with this role.
- Unused items: Menu items available in the system but hidden for this role.
- Add content: Allows inserting a custom Divider to visually separate menu sections.
- Management buttons: Use "Expand all" or "Collapse all" to manage the display of sub-items, and "Reset menu" to return to the system's default configuration.
> Important: The Dashboard must always be included in the menu. For the Admin role, the "Role Management" item is also mandatory.
4. Widgets, Topbar, and Additional Tabs
These sections allow control over the visibility of specific interface elements:
| Section | Controlled Elements |
|---|---|
| Summary Widgets | Informational panels on the Dashboard (e.g., Statistics, Recent Accesses). |
| Topbar | Elements of the top bar, such as Credits, Environment, Notifications, Support (Tickets), and Languages. |
| Extra | Additional tools like the Changelog, Guides, and AI Generator. |
| Tab Viewing | Additional tabs appearing within modules (e.g., the "History" or "Integrations" tab on an edit page). |
Automatic Integrations
The system performs automatic checks to ensure data consistency:
- Standard Role Protection: System predefined roles (e.g., Admin) cannot be deleted.
- Assigned Users Check: It is not possible to delete a custom role if there are still active users assigned to that role. Users must be reassigned to another role before proceeding with deletion.
