Roles and access control

Effective access

Membership, role, group, resource scope, plan, and feature state jointly determine access. A role name alone does not explain the final permission.

Safe assignment

1. 1

   Choose the minimum standard role.

2. 2

   Scope accounts, branches, or warehouses where needed.

3. 3

   Review the permission matrix and effective-access explanation.

4. 4

   Record owner and review date for elevated access.

Separate duties

• Viewing finance and changing classifications.
• Managing users and owning the organization.
• Opening support tickets and approving support access.