Granular permission levels for individual modules
Hi,
I wanted to check on the possibility of implementing more granular user permissions—restricting certain features while allowing others. At the moment, it’s quite difficult to manage access for specific functions without affecting users’ ability to carry out their regular tasks.
For example, under the Product Setup permission settings, the options are limited to No Access, Read Only, and Manager. However:
- With No Access or Read Only, users can’t view essential product details such as barcodes, supplier info, or website links.
- With Manager access, users can view these details—but also make changes, which we would prefer to restrict.
Ideally, we’d like a way for certain users to view product information without the ability to edit it.
Similarly, we’d like users to be able to create sales orders, but not edit them after they’re invoiced. These kinds of permission refinements would help us improve governance and reduce the risk of unintended changes, while still allowing the business to operate smoothly.
Could you please let me know whether there are more granular permission settings or workarounds available to allow view-only access without edit rights?
Comments
1 comment
Hi Dilanthi,
I agree with all your points, but below is what we have done as a workaround for some clients.
- User access in the Products module - We have added some important fields (barcodes, supplier info, or website links) in the list page. This would ensure, a read-only access would be sufficient.
It does make the list page a lot more wider, and there is only so much info you can display here as well.
- Lock editing after Invoiced - I have never tried entering 0 or 1 days under the Locked transaction setting. Worst case scenario, you can lock a Standard user from editing after 1 day of the invoiced/dispatched date.
https://help.omni.cin7.com/hc/en-us/articles/9052692660367-Locked-transactions
Thanks,
Chris Saju
CNZ Consultants
Please sign in to leave a comment.