Roles & Permissions
Go to: Users → Roles
Roles define what a user can see and do in ERPX. Each role is a collection of capabilities (permissions).
Built-in Roles
| Role | Access Level |
|---|---|
| Admin | Full system access |
| Sales Manager | Full sales access + reports |
| Sales Officer | Create and manage sales documents |
| Purchase Manager | Full purchase access + reports |
| Purchase Officer | Create and manage purchase documents |
| Finance Manager | Full financials access + reports |
| Finance Officer | Create and manage financial documents |
| HR Manager | Full HR access + reports |
| HR Officer | Create and manage HR documents |
| Inventory Manager | Full inventory access + reports |
| Inventory Officer | Create and manage stock documents |
| Manufacturing Manager | Full manufacturing access + reports |
| Manufacturing Officer | Create and manage production documents |
| Project Manager | Full project access + reports |
| CRM Manager | Full CRM access + reports |
| Support Manager | Full support access + reports |
| Employee | Employee portal + timesheets + leave |
User Capabilities
Go to: Users → User Capabilities
User capabilities are the individual permissions that make up a role — such as CAN_VIEW_SALES_ORDER or CAN_APPROVE_PAYMENT_ENTRY.
You can add extra capabilities to a specific user beyond their assigned role, or restrict specific capabilities.
Role-based access is the recommended approach. Only use individual capability overrides for exceptional cases.
User Assignment Rules
Go to: Users → User Assignment Rules
Define rules that automatically assign users to specific documents based on criteria such as territory, department, or customer group.