Chapter 17 of 21

Roles and permissions

A role is a named set of permissions. Every user has one role. The role screen is called Roles in the menu.

Requires permission: Roles → List, Add, Edit, Delete. The screen is for users assigned to the whole organization.

Creating and editing a role

Click Add role (or click a role in the list).
Enter a Name.
In the permission table tick what the role may do. Rows are modules, columns are actions. Select all ticks a whole column.
Under the table there are extra permissions (for example the service code and demo mode).
Save.

A role assigned to users cannot be deleted. You can give a role only the permissions you have yourself.

A role with the Administrator switch has every permission in its organization. It is set by the VDMSync operator.

Action	What it allows
List	See the list (without it the screen is empty or unavailable).
View	Open details.
Add	Create new records.
Edit	Change existing records.
Delete	Delete records.
Add & edit	For SupplyPoint data: add and change records on the machines.
Access code	Generate the agent pairing code.

Module	What it covers
Account	Editing your own organization's details.
Roles	The Roles screen.
Clients, Locations	The network screens.
Machines	The agent list and the access code.
Users	The Users screen, including 2FA reset (Edit).
SupplyPoint items	Items and item groups on the machines.
SupplyPoint employees	Employees and employee groups on the machines.
Rationing & restrictions	SupplyPoint allowances and restrictions.
Withdrawal limits	VDMSync withdrawal limits.
"Stock alerts"	Stock alerts.
"Deliveries"	Delivery days in the delivery plan.

Besides the role, it matters what the user is assigned to:

the whole organization: sees everything and can (with the right role) manage users, roles, clients, locations, limits and alerts;
a client, a location or a machine: sees only data in that scope and has no administration screens.