User Management & Group Permissions (RBAC)

The User Management & Role-Based Access Control (RBAC) module allows tenants to manage staff members, enforce granular permission matrices across 15 system feature domains, and configure data visibility and warehouse access scoping.

Key Capabilities

1. Users Management (/users):

   • Comprehensive team member directory with columns for First name, Last name, Username, Email, Phone, Status, and Action.
   • Interactive Status Toggle: Instant active / inactive switch to quickly grant or revoke employee access.
   • Plan Quota Gating: System automatically verifies active subscription user limits before provisioning new team members.
   • Export Tools: One-click PDF and EXCEL export along with live table search and configurable pagination rows (5, 10, 25, 50).

2. Create & Edit User Profile (/users/new & /users/:id/edit):

   • Profile Information: First name, Last name, unique Username, Phone, Email, and Password with secure bcrypt encryption.
   • Role Assignment: Assign custom group permissions (e.g. Owner, Admin, Cashier, Manager, Staff).
   • User Avatar: Profile image selector.
   • Data Scope Configuration:
     • View all records of all Users: Toggle whether the user can inspect transactions across the entire business or only their own created orders.
     • Access warehouses: Scopes user access to All Warehouses or specific assigned locations.

3. Group Permissions & Role Builder (/roles, /roles/new, /roles/:id/edit):

   • Define custom role names and descriptions.
   • System Protected Owner Role: Default Owner role is automatically seeded with complete access and protected against deletion.
   • 15-Category Permission Matrix Cards:
     1. Dashboard: Access primary KPIs and financial charts.
     2. Users management: View, Create, Edit, Delete.
     3. Users Permissions: View, Create, Edit, Delete.
     4. Products: View, Create, Edit, Delete, Barcode, Import products, Category, Sub Category, Brand, Unit, Count Stock, Subscription Product, Opening Stock Import.
     5. Pharmacy Settings: view batches, create / edit batches, write off batches, override FEFO / sell quarantined, expiry_report, Batch Register.
     6. Adjustment: View, Create, Edit, Delete.
     7. Damages: Access damaged inventory records.
     8. Transfer: View, Create, Edit, Delete.
     9. Accounting: Accounting dashboard, Chart of accounts, journal entries, Trial balance, Accounting profit & loss, Balance sheet, Accounting tax report, List accounts, Promotions, Transfer money, expense_view, add expense, edit expense, delete expense, view deposit, add deposit, edit deposit, delete deposit.
     10. Assets: Asset management permissions.
     11. Service & Maintenance: Maintenance service tracking.
     12. Sales: View, Create, Edit, Delete, Point of Sales, Real-time Sales Counter, Kitchen Display, Kitchen Display - Manage, customer display screen setup, Shipments, Change product details, edit tax and discount and shipping.
     13. Commissions: View, Create, Edit, Delete.
     14. Knowledge Base: View / Manage.
     15. Webhooks: View, Create, Edit, Delete.
   • Select All / Deselect All Controls: Instant batch toggle for rapid role configuration.