{"id":22013,"date":"2026-07-24T10:51:43","date_gmt":"2026-07-24T10:51:43","guid":{"rendered":"https:\/\/tenthplanet.in\/idempiere\/?p=22013"},"modified":"2026-08-13T04:46:16","modified_gmt":"2026-08-13T04:46:16","slug":"how-copy-role-process-works-in-idempiere","status":"publish","type":"post","link":"https:\/\/tenthplanet.in\/idempiere\/how-copy-role-process-works-in-idempiere\/","title":{"rendered":"How Copy Role Process Works in iDempiere"},"content":{"rendered":"\n

Introduction<\/strong><\/h2>\n\n\n\n

The Copy Role process in iDempiere lets an administrator duplicate the access permissions of one user role into another role in a single action.<\/p>\n\n\n\n

It is used whenever a business needs to set up a new role with access similar to an existing one, such as creating a supervisor role based on a manager role.<\/p>\n\n\n\n

Running this process replaces the destination role’s current access, so it directly affects which windows, processes, and reports users can reach afterward.<\/p>\n\n\n\n

Process Flow<\/strong><\/h2>\n\n\n\n
\"TenthPlanet-iDempiere-SystemAdmin-CopyRole-ProcessFlow\"<\/figure>\n\n\n\n

Business Rules<\/strong><\/h2>\n\n\n\n
    \n
  • Only users with an advanced role can run the Copy Role process.<\/li>\n\n\n\n
  • The source role and destination role must be different from each other.<\/li>\n\n\n\n
  • All existing access records of the destination role are removed before copying.<\/li>\n\n\n\n
  • Access is copied for windows, processes, forms, workflows, tasks, document actions, info windows, and included roles.<\/li>\n\n\n\n
  • Copying can be limited to one organization or applied across all organizations.<\/li>\n\n\n\n
  • The process can run immediately or be scheduled to run as a background job.<\/li>\n<\/ul>\n\n\n\n

    Prerequisites<\/strong><\/h2>\n\n\n\n
      \n
    • At least two roles already created in the system.<\/li>\n\n\n\n
    • The source role has the correct access already set up and verified.<\/li>\n\n\n\n
    • The user running the process is logged in with an advanced role.<\/li>\n\n\n\n
    • Organization structure configured, if the copy needs to be limited to one organization.<\/li>\n<\/ul>\n\n\n\n

      Navigation<\/strong><\/h2>\n\n\n\n
      Menu \u2192 System Admin \u2192 General Rules \u2192 Security \u2192 Copy Role<\/strong><\/code><\/pre>\n\n\n\n
      \"TenthPlanet-iDempiere-SystemAdmin-CopyRole-1\"<\/figure>\n\n\n\n
      After opening the window, users first see a warning message explaining that access records will be replaced, followed by the Organization, Role From, Role To fields, and a Run as Job option.<\/p>\n\n\n\n
      \"TenthPlanet-iDempiere-SystemAdmin-CopyRole-2\"<\/figure>\n\n\n\n
      Configuration Steps<\/strong><\/h2>\n\n\n\n
      Step 1: Review the Warning Message<\/strong><\/h3>\n\n\n\n
      This step confirms the user understands that copying will replace the destination role’s current access before any changes happen.<\/p>\n\n\n\n
      Instructions<\/strong><\/h3>\n\n\n\n
      Read the warning stating that the destination role’s access records will be lost and replaced. Confirm this is intended before continuing.<\/p>\n\n\n\n
      Step 2: Select the Organization (Optional)<\/strong><\/h3>\n\n\n\n
      This step limits the copy activity to a chosen organization when access setup should not apply company-wide.<\/p>\n\n\n\n
      Instructions<\/strong><\/h3>\n\n\n\n
      Choose an Organization to restrict the copy to that organization only. Leave the field blank to copy access across all organizations.<\/p>\n\n\n\n
      Field<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>
      Organization<\/td>Head Office<\/td>Restricts the copied access to a single organization<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
      Step 3: Select the Role From<\/strong><\/h3>\n\n\n\n
      The Role From holds the access permissions that will be duplicated, so it must already be set up correctly.<\/p>\n\n\n\n
      Instructions<\/strong><\/h3>\n\n\n\n
      Choose the role whose permissions should be copied. Ensure this role’s access is complete and accurate before proceeding.<\/p>\n\n\n\n
      Field<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>
      Role From<\/td>Sales Manager<\/td>Source role that provides the access to be copied<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
      Step 4: Select the Role To<\/strong><\/h3>\n\n\n\n
      The Role To is the destination role that will receive the copied access, replacing whatever access it currently has.<\/p>\n\n\n\n
      Instructions<\/strong><\/h3>\n\n\n\n
      Choose the role that should receive the copied access. Double-check this selection, since its current access will be replaced.<\/p>\n\n\n\n
      Field<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>
      Role To<\/td>Sales Supervisor<\/td>Destination role that receives the copied access<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
      Step 5: Choose Run as Job (Optional)<\/strong><\/h3>\n\n\n\n
      For roles with a large amount of access to copy, running the process as a job avoids waiting on-screen for it to finish.<\/p>\n\n\n\n

      Instructions<\/strong><\/h3>\n\n\n\n
      Enable Run as Job to let the process complete in the background. Leave it unchecked to run the process immediately.<\/p>\n\n\n\n
      Field<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>
      Run as Job<\/td>Unchecked<\/td>Runs the process in the background instead of immediately<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
      Step 6: Execute the Process<\/strong><\/h3>\n\n\n\n
      This final step carries out the copy and confirms the outcome to the user.<\/p>\n\n\n\n
      Instructions<\/strong><\/h3>\n\n\n\n
      Click OK to run the process. Review the confirmation message and log details once the process completes.<\/p>\n\n\n\n
      Note:<\/strong> This process cannot be undone automatically. Confirm the Role From and Role To selections carefully before clicking OK.<\/code><\/pre>\n\n\n\n
      \"TenthPlanet-iDempiere-SystemAdmin-CopyRole-3\"<\/figure>\n\n\n\n
      Common Issues and Resolutions<\/strong><\/h2>\n\n\n\n
      Issue<\/strong><\/td>Cause<\/strong><\/td>Resolution<\/strong><\/td><\/tr><\/thead>
      Error message states roles must be different<\/td>The same role was selected for both Role From and Role To<\/td>Select two different roles before running the process<\/td><\/tr>
      Process does not run for a user<\/td>The logged-in role does not have advanced access rights<\/td>Run the process using an administrator or advanced role<\/td><\/tr>
      Expected access missing after copying<\/td>The destination role’s prior access was removed before the copy<\/td>Verify the source role’s access is complete before running the process<\/td><\/tr>
      Unrelated access lost from the destination role<\/td>All existing access of the destination role is replaced, not merged<\/td>Review or document destination role access before copying<\/td><\/tr>
      No visible result after clicking OK<\/td>Run as Job was selected, so the process runs in the background<\/td>Check the process or job status window for completion<\/td><\/tr>
      Copy applied to more organizations than expected<\/td>The Organization field was left blank, copying across all organizations<\/td>Select the specific organization when a limited copy is required<\/td><\/tr>
      Users still cannot see expected windows after copying<\/td>Users assigned to the destination role are still using a cached session<\/td>Ask affected users to log out and log back in to refresh access<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
      Next Steps<\/strong><\/h2>\n\n\n\n
        \n
      • Open the Role window to review and fine-tune the copied access.<\/li>\n\n\n\n
      • Configure Window Access, Process Access, or Form Access individually for any exceptions.<\/li>\n\n\n\n
      • Assign the destination role to the appropriate users.<\/li>\n\n\n\n
      • Test access by logging in with a user assigned to the updated role.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
        Introduction The Copy Role process in iDempiere lets an administrator duplicate the access permissions of one user role into another […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[38,10],"tags":[],"class_list":["post-22013","post","type-post","status-publish","format-standard","hentry","category-idempiere-master","category-idempiere-product"],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22013","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=22013"}],"version-history":[{"count":1,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22013\/revisions"}],"predecessor-version":[{"id":22032,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22013\/revisions\/22032"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=22013"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=22013"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=22013"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}