Difference between revisions of "Access rights"
From Protemos Wiki
(→1.35) |
(→Settings) |
||
| (80 intermediate revisions by 5 users not shown) | |||
| Line 1: | Line 1: | ||
| − | '' | + | __FORCETOC__ |
| + | ''Roles and access rights: [https://cloud.protemos.com/user/roles cloud.protemos.com/user/roles]'' | ||
---- | ---- | ||
| − | |||
| − | + | <span style="color:red">Some of the features described below will be available with the forthcoming system release.</span> | |
| − | + | Go to '''Settings ⇾ Access control ⇾ Roles '''. | |
| − | [[File: | + | [[File:Settings - access control - roles.png|border|300px]] |
| − | + | =='''Access rights for managers'''== | |
| − | + | This table shows the levels of access rights in the system and the permissions that are associated with each level. Using the data from it, you may define a certain level of access rights for your managers according to your needs: | |
| − | - | + | [[File:Role-based access control.1.png|border|1200px]] |
| − | + | To put it shortly, it means the following: | |
| − | + | *'''Owner''' — the only person who can delete the account. Has full Administrator rights | |
| − | + | *'''Administrator''' — has full access to everything. | |
| − | |||
| − | + | *'''Project and finance manager''' — has access to everything, but cannot add managers and change system settings. | |
| − | + | *'''Project and client finance manager''' — the same as “Project and finance manager”, but without access to vendor payables, invoices, payments, and payment methods. | |
| − | * ''' | + | *'''Project and vendor finance manager''' — the same “Project and finance manager”, but without access to client receivables, invoices, and payments. |
| − | * ''' | + | *'''Project manager''' — a manager without access to client receivables, vendor payables, payment methods, their invoices and payments. |
| − | |||
| − | * ''' | + | *'''Sales manager''' — a manager who can create quotes and projects but cannot access jobs as well as job tenders. This role also does not allow to access vendor profiles and all vendor-related finances. |
| − | * ''' | + | *'''Accountant''' — this role lets the user create invoices based on payables and receivables entered by project managers, and also enter payments from clients and to vendors. The accountant cannot create or edit projects or assign jobs to vendors. |
| − | * '''Vendor manager''': | + | *'''Client and vendor manager''' — can enter clients and vendors and their prices into the database. |
| + | |||
| + | *'''Client manager''' — can enter clients and their prices into the database. | ||
| + | |||
| + | *'''Vendor manager''' — can enter vendors and their prices into the database. | ||
| + | |||
| + | *'''To-do employee''' — this role allows the user to create to-dos and access to-dos assigned to them. | ||
| + | |||
| + | =='''Access rights to reports and settings'''== | ||
| + | |||
| + | ==='''Reports'''=== | ||
| + | |||
| + | Each manager can view reports that are only relevant to their role permissions. | ||
| + | |||
| + | For instance, the “Project and client finance manager” role allows viewing financial reports related to clients, but does not allow viewing similar vendor-related reports. | ||
| + | |||
| + | Consequently, a manager with such a role will also not be able to see the reports on language pairs, services, specializations, etc., because they also consist of amounts paid to vendors. | ||
| + | |||
| + | <span style="color:orange">'''Note:'''</span> Only the “Administrator” role allows viewing all the reports. | ||
| + | |||
| + | ==='''Settings'''=== | ||
| + | |||
| + | The same logic applies to viewing settings: Each role (except “Administrator”) allows accessing certain account settings sections in the view-only mode in accordance with the roles’ permissions. | ||
| + | |||
| + | For instance, a manager with the “Project manager” role does not have access to such account settings as '''Payment methods''', '''Taxes''', '''CAT log conversion schemes''', '''Email templates''', etc., because this role does not include permissions to use corresponding features. | ||
| + | |||
| + | Please note that all the roles allow viewing the '''System values''' section. | ||
| + | |||
| + | <span style="color:orange">'''Note:'''</span> Only the "Administrator" role allows not only viewing, but also editing all the settings. | ||
| + | |||
| + | =='''Access rights for clients and vendors'''== | ||
| + | |||
| + | [[File:Clients and vendors table.png|border|1200px]] | ||
| + | |||
| + | =='''Client pools'''== | ||
| + | |||
| + | By default, managers can access all the client profiles and other client-related objects according to their role but you can limit the access of your managers to specific clients according to your needs. | ||
| + | To do so, you can create and assign a client pool to certain managers. For more info, please check the <U>[[Client pools|'''Client pools''']]</U> page. | ||
Latest revision as of 13:49, 23 October 2025
Roles and access rights: cloud.protemos.com/user/roles
Some of the features described below will be available with the forthcoming system release.
Go to Settings ⇾ Access control ⇾ Roles .
Contents
Access rights for managers
This table shows the levels of access rights in the system and the permissions that are associated with each level. Using the data from it, you may define a certain level of access rights for your managers according to your needs:
To put it shortly, it means the following:
- Owner — the only person who can delete the account. Has full Administrator rights
- Administrator — has full access to everything.
- Project and finance manager — has access to everything, but cannot add managers and change system settings.
- Project and client finance manager — the same as “Project and finance manager”, but without access to vendor payables, invoices, payments, and payment methods.
- Project and vendor finance manager — the same “Project and finance manager”, but without access to client receivables, invoices, and payments.
- Project manager — a manager without access to client receivables, vendor payables, payment methods, their invoices and payments.
- Sales manager — a manager who can create quotes and projects but cannot access jobs as well as job tenders. This role also does not allow to access vendor profiles and all vendor-related finances.
- Accountant — this role lets the user create invoices based on payables and receivables entered by project managers, and also enter payments from clients and to vendors. The accountant cannot create or edit projects or assign jobs to vendors.
- Client and vendor manager — can enter clients and vendors and their prices into the database.
- Client manager — can enter clients and their prices into the database.
- Vendor manager — can enter vendors and their prices into the database.
- To-do employee — this role allows the user to create to-dos and access to-dos assigned to them.
Access rights to reports and settings
Reports
Each manager can view reports that are only relevant to their role permissions.
For instance, the “Project and client finance manager” role allows viewing financial reports related to clients, but does not allow viewing similar vendor-related reports.
Consequently, a manager with such a role will also not be able to see the reports on language pairs, services, specializations, etc., because they also consist of amounts paid to vendors.
Note: Only the “Administrator” role allows viewing all the reports.
Settings
The same logic applies to viewing settings: Each role (except “Administrator”) allows accessing certain account settings sections in the view-only mode in accordance with the roles’ permissions.
For instance, a manager with the “Project manager” role does not have access to such account settings as Payment methods, Taxes, CAT log conversion schemes, Email templates, etc., because this role does not include permissions to use corresponding features.
Please note that all the roles allow viewing the System values section.
Note: Only the "Administrator" role allows not only viewing, but also editing all the settings.
Access rights for clients and vendors
Client pools
By default, managers can access all the client profiles and other client-related objects according to their role but you can limit the access of your managers to specific clients according to your needs. To do so, you can create and assign a client pool to certain managers. For more info, please check the Client pools page.
