Roles and rights

Roles bundle many rights and can be assigned to user groups. To manage roles it is necessary to have a technical understanding of the system, which is the reason why they must be handled in the System module.

A role is available in every client and not client specific.

A user which is assigned to a user group automatically gets all the rights that belong to the roles of the user group. User groups are client specific.

Roles

A role consists of:

  • A name and a description of the role

  • a list of rights (mainly the right "EXECUTE")

  • functions or function groups to which the right applies

  • setting if the role is enabled and if it allows or not allows the rights.

Role sections

Role section have no functional impact but help to organize the roles when they are shown in a list

Permissions

Permissions are the hard coded gates in a function which are checked before the function will be executed. If a user e.g. does not have the permission "EXECUTE" for the function to "edit system settings", then he cannot edit them.