![\"\"](\"https:\/\/tenthplanet.in\/idempiere\/wp-content\/uploads\/sites\/13\/2026\/07\/TenthPlanet-iDempiere-AllUserRoles-1024x230.png\" "\\"\\"")
<\/figure>\n\n\n\nBusiness Rules<\/strong><\/h2>\n\n\n\n\n- Only Active roles can be assigned to users for system login.<\/li>\n\n\n\n
- User Level determines access scope: Client, Organization, or Client+Organization.<\/li>\n\n\n\n
- Can Export and Can Report control data extraction and report visibility per role.<\/li>\n\n\n\n
- Show Accounting restricts financial ledger data to authorized roles only.<\/li>\n\n\n\n
- Access Advanced exposes advanced configuration windows to selected roles.<\/li>\n\n\n\n
- Personal Lock and Personal Access restrict records to the creating user.<\/li>\n\n\n\n
- Preference Level controls whether user preferences apply at Client, Org, or User scope.<\/li>\n\n\n\n
- Access all Orgs grants a role visibility across every store organization.<\/li>\n<\/ul>\n\n\n\n
Prerequisites<\/strong><\/h2>\n\n\n\n\n- Tenant (Client) configured, e.g. POTS.<\/li>\n\n\n\n
- Organization(s) representing stores or regions configured.<\/li>\n\n\n\n
- System Users created and available for role assignment.<\/li>\n\n\n\n
- Org structure and Business Partner setup completed for scoping access.<\/li>\n<\/ul>\n\n\n\n
Navigation<\/strong><\/h2>\n\n\n\nMenu \u2192 General Rules \u2192 Security \u2192 All User Role<\/p>\n\n\n\n
Configuration Steps<\/strong><\/h2>\n\n\n\nStep 1: Define Role Identity<\/strong><\/h3>\n\n\n\nEnter a descriptive Name (e.g. Store Cashier) and an optional Description explaining the role’s intended use.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Name<\/td> POTS Admin<\/td> Identifies the role for assignment to users<\/td><\/tr> Description<\/td> (optional)<\/td> Explains the intended purpose of the role<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n![\"\"](\"https:\/\/tenthplanet.in\/idempiere\/wp-content\/uploads\/sites\/13\/2026\/07\/TenthPlanet-iDempiere-GeneralRules-AllUserRoles-1024x456.png\" "\\"\\"")
<\/figure>\n\n\n\nStep 2: Set User Level and Scope<\/strong><\/h3>\n\n\n\nSelect the appropriate User Level for the role and set the Preference Level to control where saved preferences apply.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>User Level<\/td> Client+Organization<\/td> Role can operate at both chain and store level<\/td><\/tr> Preference Level<\/td> Client<\/td> User preferences saved apply chain-wide<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 3: Configure Access Permissions<\/strong><\/h3>\n\n\n\nEnable only the checkboxes required for the role’s function. Leave sensitive options like Show Accounting unchecked for store-floor staff.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Manual<\/td> Unchecked<\/td> Role is not manually maintained outside templates<\/td><\/tr> Role Template<\/td> Unchecked<\/td> Role is not used as a template for other roles<\/td><\/tr> Access all Orgs<\/td> Unchecked<\/td> Restricts visibility to assigned organizations only<\/td><\/tr> Use User Org Access<\/td> Unchecked<\/td> Org access follows role, not individual user<\/td><\/tr> Can Export<\/td> Checked<\/td> Allows the role to export data<\/td><\/tr> Can Report<\/td> Checked<\/td> Allows the role to run and view reports<\/td><\/tr> Show Accounting<\/td> Checked<\/td> Allows the role to view accounting\/financial data<\/td><\/tr> Personal Lock<\/td> Unchecked<\/td> Records are not locked to the creating user<\/td><\/tr> Personal Access<\/td> Unchecked<\/td> Records are not restricted to the creating user<\/td><\/tr> Access Advanced<\/td> Checked<\/td> Grants access to advanced configuration windows<\/td><\/tr> Maintain Change Log<\/td> Unchecked<\/td> Change log tracking is not enforced for this role<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 4: Set Role Type<\/strong><\/h3>\n\n\n\nLeave Role Type blank unless the organization uses role classification for reporting.<\/p>\n\n\n\n
Step 5: Activate the Role<\/strong><\/h3>\n\n\n\nCheck the Active box, then save the record to make the role available for user assignment.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Active<\/td> Checked<\/td> Enables the role for assignment and login<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nCommon Issues and Resolutions<\/strong><\/h2>\n\n\n\nIssue<\/strong><\/td>Cause<\/strong><\/td>Resolution<\/strong><\/td><\/tr><\/thead>User cannot log in with assigned role<\/td> Role marked inactive<\/td> Activate the role record and save<\/td><\/tr> Staff can view other stores’ data<\/td> Access all Orgs enabled incorrectly<\/td> Disable Access all Orgs; restrict via Org Access tab<\/td><\/tr> Cashier can view accounting reports<\/td> Show Accounting checked for cashier role<\/td> Uncheck Show Accounting for non-finance roles<\/td><\/tr> Export button missing for manager<\/td> Can Export not enabled<\/td> Enable the Can Export checkbox and save<\/td><\/tr> User preferences not saved per store<\/td> Preference Level set to Client<\/td> Change Preference Level to Organization<\/td><\/tr> Role changes not reflected for user<\/td> Cached role session in browser<\/td> Ask the user to log out and log back in<\/td><\/tr> New windows not visible after update<\/td> Menu or window access not granted<\/td> Grant window access via the role’s Window Access tab<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nNext Steps<\/strong><\/h2>\n\n\n\n\n- Configure Org Access, Window Access, and Process Access tabs for the role.<\/li>\n\n\n\n
- Assign the completed role to Users via the User window.<\/li>\n\n\n\n
- Set up Document Type access per role for POS transactions.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
The User Roles window defines the security and access level for every iDempiere user in a retail deployment. It controls […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91,10],"tags":[],"class_list":["post-22122","post","type-post","status-publish","format-standard","hentry","category-idempiere-general-rules","category-idempiere-product"],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=22122"}],"version-history":[{"count":5,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122\/revisions"}],"predecessor-version":[{"id":27132,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122\/revisions\/27132"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=22122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=22122"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=22122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Prerequisites<\/strong><\/h2>\n\n\n\n\n- Tenant (Client) configured, e.g. POTS.<\/li>\n\n\n\n
- Organization(s) representing stores or regions configured.<\/li>\n\n\n\n
- System Users created and available for role assignment.<\/li>\n\n\n\n
- Org structure and Business Partner setup completed for scoping access.<\/li>\n<\/ul>\n\n\n\n
Navigation<\/strong><\/h2>\n\n\n\nMenu \u2192 General Rules \u2192 Security \u2192 All User Role<\/p>\n\n\n\n
Configuration Steps<\/strong><\/h2>\n\n\n\nStep 1: Define Role Identity<\/strong><\/h3>\n\n\n\nEnter a descriptive Name (e.g. Store Cashier) and an optional Description explaining the role’s intended use.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Name<\/td> POTS Admin<\/td> Identifies the role for assignment to users<\/td><\/tr> Description<\/td> (optional)<\/td> Explains the intended purpose of the role<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<\/figure>\n\n\n\nStep 2: Set User Level and Scope<\/strong><\/h3>\n\n\n\nSelect the appropriate User Level for the role and set the Preference Level to control where saved preferences apply.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>User Level<\/td> Client+Organization<\/td> Role can operate at both chain and store level<\/td><\/tr> Preference Level<\/td> Client<\/td> User preferences saved apply chain-wide<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 3: Configure Access Permissions<\/strong><\/h3>\n\n\n\nEnable only the checkboxes required for the role’s function. Leave sensitive options like Show Accounting unchecked for store-floor staff.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Manual<\/td> Unchecked<\/td> Role is not manually maintained outside templates<\/td><\/tr> Role Template<\/td> Unchecked<\/td> Role is not used as a template for other roles<\/td><\/tr> Access all Orgs<\/td> Unchecked<\/td> Restricts visibility to assigned organizations only<\/td><\/tr> Use User Org Access<\/td> Unchecked<\/td> Org access follows role, not individual user<\/td><\/tr> Can Export<\/td> Checked<\/td> Allows the role to export data<\/td><\/tr> Can Report<\/td> Checked<\/td> Allows the role to run and view reports<\/td><\/tr> Show Accounting<\/td> Checked<\/td> Allows the role to view accounting\/financial data<\/td><\/tr> Personal Lock<\/td> Unchecked<\/td> Records are not locked to the creating user<\/td><\/tr> Personal Access<\/td> Unchecked<\/td> Records are not restricted to the creating user<\/td><\/tr> Access Advanced<\/td> Checked<\/td> Grants access to advanced configuration windows<\/td><\/tr> Maintain Change Log<\/td> Unchecked<\/td> Change log tracking is not enforced for this role<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 4: Set Role Type<\/strong><\/h3>\n\n\n\nLeave Role Type blank unless the organization uses role classification for reporting.<\/p>\n\n\n\n
Step 5: Activate the Role<\/strong><\/h3>\n\n\n\nCheck the Active box, then save the record to make the role available for user assignment.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Active<\/td> Checked<\/td> Enables the role for assignment and login<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nCommon Issues and Resolutions<\/strong><\/h2>\n\n\n\nIssue<\/strong><\/td>Cause<\/strong><\/td>Resolution<\/strong><\/td><\/tr><\/thead>User cannot log in with assigned role<\/td> Role marked inactive<\/td> Activate the role record and save<\/td><\/tr> Staff can view other stores’ data<\/td> Access all Orgs enabled incorrectly<\/td> Disable Access all Orgs; restrict via Org Access tab<\/td><\/tr> Cashier can view accounting reports<\/td> Show Accounting checked for cashier role<\/td> Uncheck Show Accounting for non-finance roles<\/td><\/tr> Export button missing for manager<\/td> Can Export not enabled<\/td> Enable the Can Export checkbox and save<\/td><\/tr> User preferences not saved per store<\/td> Preference Level set to Client<\/td> Change Preference Level to Organization<\/td><\/tr> Role changes not reflected for user<\/td> Cached role session in browser<\/td> Ask the user to log out and log back in<\/td><\/tr> New windows not visible after update<\/td> Menu or window access not granted<\/td> Grant window access via the role’s Window Access tab<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nNext Steps<\/strong><\/h2>\n\n\n\n\n- Configure Org Access, Window Access, and Process Access tabs for the role.<\/li>\n\n\n\n
- Assign the completed role to Users via the User window.<\/li>\n\n\n\n
- Set up Document Type access per role for POS transactions.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
The User Roles window defines the security and access level for every iDempiere user in a retail deployment. It controls […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91,10],"tags":[],"class_list":["post-22122","post","type-post","status-publish","format-standard","hentry","category-idempiere-general-rules","category-idempiere-product"],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=22122"}],"version-history":[{"count":5,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122\/revisions"}],"predecessor-version":[{"id":27132,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122\/revisions\/27132"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=22122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=22122"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=22122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Navigation<\/strong><\/h2>\n\n\n\nMenu \u2192 General Rules \u2192 Security \u2192 All User Role<\/p>\n\n\n\n
Configuration Steps<\/strong><\/h2>\n\n\n\nStep 1: Define Role Identity<\/strong><\/h3>\n\n\n\nEnter a descriptive Name (e.g. Store Cashier) and an optional Description explaining the role’s intended use.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Name<\/td> POTS Admin<\/td> Identifies the role for assignment to users<\/td><\/tr> Description<\/td> (optional)<\/td> Explains the intended purpose of the role<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<\/figure>\n\n\n\nStep 2: Set User Level and Scope<\/strong><\/h3>\n\n\n\nSelect the appropriate User Level for the role and set the Preference Level to control where saved preferences apply.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>User Level<\/td> Client+Organization<\/td> Role can operate at both chain and store level<\/td><\/tr> Preference Level<\/td> Client<\/td> User preferences saved apply chain-wide<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 3: Configure Access Permissions<\/strong><\/h3>\n\n\n\nEnable only the checkboxes required for the role’s function. Leave sensitive options like Show Accounting unchecked for store-floor staff.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Manual<\/td> Unchecked<\/td> Role is not manually maintained outside templates<\/td><\/tr> Role Template<\/td> Unchecked<\/td> Role is not used as a template for other roles<\/td><\/tr> Access all Orgs<\/td> Unchecked<\/td> Restricts visibility to assigned organizations only<\/td><\/tr> Use User Org Access<\/td> Unchecked<\/td> Org access follows role, not individual user<\/td><\/tr> Can Export<\/td> Checked<\/td> Allows the role to export data<\/td><\/tr> Can Report<\/td> Checked<\/td> Allows the role to run and view reports<\/td><\/tr> Show Accounting<\/td> Checked<\/td> Allows the role to view accounting\/financial data<\/td><\/tr> Personal Lock<\/td> Unchecked<\/td> Records are not locked to the creating user<\/td><\/tr> Personal Access<\/td> Unchecked<\/td> Records are not restricted to the creating user<\/td><\/tr> Access Advanced<\/td> Checked<\/td> Grants access to advanced configuration windows<\/td><\/tr> Maintain Change Log<\/td> Unchecked<\/td> Change log tracking is not enforced for this role<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 4: Set Role Type<\/strong><\/h3>\n\n\n\nLeave Role Type blank unless the organization uses role classification for reporting.<\/p>\n\n\n\n
Step 5: Activate the Role<\/strong><\/h3>\n\n\n\nCheck the Active box, then save the record to make the role available for user assignment.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Active<\/td> Checked<\/td> Enables the role for assignment and login<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nCommon Issues and Resolutions<\/strong><\/h2>\n\n\n\nIssue<\/strong><\/td>Cause<\/strong><\/td>Resolution<\/strong><\/td><\/tr><\/thead>User cannot log in with assigned role<\/td> Role marked inactive<\/td> Activate the role record and save<\/td><\/tr> Staff can view other stores’ data<\/td> Access all Orgs enabled incorrectly<\/td> Disable Access all Orgs; restrict via Org Access tab<\/td><\/tr> Cashier can view accounting reports<\/td> Show Accounting checked for cashier role<\/td> Uncheck Show Accounting for non-finance roles<\/td><\/tr> Export button missing for manager<\/td> Can Export not enabled<\/td> Enable the Can Export checkbox and save<\/td><\/tr> User preferences not saved per store<\/td> Preference Level set to Client<\/td> Change Preference Level to Organization<\/td><\/tr> Role changes not reflected for user<\/td> Cached role session in browser<\/td> Ask the user to log out and log back in<\/td><\/tr> New windows not visible after update<\/td> Menu or window access not granted<\/td> Grant window access via the role’s Window Access tab<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nNext Steps<\/strong><\/h2>\n\n\n\n\n- Configure Org Access, Window Access, and Process Access tabs for the role.<\/li>\n\n\n\n
- Assign the completed role to Users via the User window.<\/li>\n\n\n\n
- Set up Document Type access per role for POS transactions.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
The User Roles window defines the security and access level for every iDempiere user in a retail deployment. It controls […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91,10],"tags":[],"class_list":["post-22122","post","type-post","status-publish","format-standard","hentry","category-idempiere-general-rules","category-idempiere-product"],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=22122"}],"version-history":[{"count":5,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122\/revisions"}],"predecessor-version":[{"id":27132,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122\/revisions\/27132"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=22122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=22122"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=22122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Step 1: Define Role Identity<\/strong><\/h3>\n\n\n\nEnter a descriptive Name (e.g. Store Cashier) and an optional Description explaining the role’s intended use.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Name<\/td> POTS Admin<\/td> Identifies the role for assignment to users<\/td><\/tr> Description<\/td> (optional)<\/td> Explains the intended purpose of the role<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<\/figure>\n\n\n\nStep 2: Set User Level and Scope<\/strong><\/h3>\n\n\n\nSelect the appropriate User Level for the role and set the Preference Level to control where saved preferences apply.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>User Level<\/td> Client+Organization<\/td> Role can operate at both chain and store level<\/td><\/tr> Preference Level<\/td> Client<\/td> User preferences saved apply chain-wide<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 3: Configure Access Permissions<\/strong><\/h3>\n\n\n\nEnable only the checkboxes required for the role’s function. Leave sensitive options like Show Accounting unchecked for store-floor staff.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Manual<\/td> Unchecked<\/td> Role is not manually maintained outside templates<\/td><\/tr> Role Template<\/td> Unchecked<\/td> Role is not used as a template for other roles<\/td><\/tr> Access all Orgs<\/td> Unchecked<\/td> Restricts visibility to assigned organizations only<\/td><\/tr> Use User Org Access<\/td> Unchecked<\/td> Org access follows role, not individual user<\/td><\/tr> Can Export<\/td> Checked<\/td> Allows the role to export data<\/td><\/tr> Can Report<\/td> Checked<\/td> Allows the role to run and view reports<\/td><\/tr> Show Accounting<\/td> Checked<\/td> Allows the role to view accounting\/financial data<\/td><\/tr> Personal Lock<\/td> Unchecked<\/td> Records are not locked to the creating user<\/td><\/tr> Personal Access<\/td> Unchecked<\/td> Records are not restricted to the creating user<\/td><\/tr> Access Advanced<\/td> Checked<\/td> Grants access to advanced configuration windows<\/td><\/tr> Maintain Change Log<\/td> Unchecked<\/td> Change log tracking is not enforced for this role<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 4: Set Role Type<\/strong><\/h3>\n\n\n\nLeave Role Type blank unless the organization uses role classification for reporting.<\/p>\n\n\n\n
Step 5: Activate the Role<\/strong><\/h3>\n\n\n\nCheck the Active box, then save the record to make the role available for user assignment.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Active<\/td> Checked<\/td> Enables the role for assignment and login<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nCommon Issues and Resolutions<\/strong><\/h2>\n\n\n\nIssue<\/strong><\/td>Cause<\/strong><\/td>Resolution<\/strong><\/td><\/tr><\/thead>User cannot log in with assigned role<\/td> Role marked inactive<\/td> Activate the role record and save<\/td><\/tr> Staff can view other stores’ data<\/td> Access all Orgs enabled incorrectly<\/td> Disable Access all Orgs; restrict via Org Access tab<\/td><\/tr> Cashier can view accounting reports<\/td> Show Accounting checked for cashier role<\/td> Uncheck Show Accounting for non-finance roles<\/td><\/tr> Export button missing for manager<\/td> Can Export not enabled<\/td> Enable the Can Export checkbox and save<\/td><\/tr> User preferences not saved per store<\/td> Preference Level set to Client<\/td> Change Preference Level to Organization<\/td><\/tr> Role changes not reflected for user<\/td> Cached role session in browser<\/td> Ask the user to log out and log back in<\/td><\/tr> New windows not visible after update<\/td> Menu or window access not granted<\/td> Grant window access via the role’s Window Access tab<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nNext Steps<\/strong><\/h2>\n\n\n\n\n- Configure Org Access, Window Access, and Process Access tabs for the role.<\/li>\n\n\n\n
- Assign the completed role to Users via the User window.<\/li>\n\n\n\n
- Set up Document Type access per role for POS transactions.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
The User Roles window defines the security and access level for every iDempiere user in a retail deployment. It controls […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91,10],"tags":[],"class_list":["post-22122","post","type-post","status-publish","format-standard","hentry","category-idempiere-general-rules","category-idempiere-product"],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=22122"}],"version-history":[{"count":5,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122\/revisions"}],"predecessor-version":[{"id":27132,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22122\/revisions\/27132"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=22122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=22122"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=22122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Field<\/strong><\/td>| Sample Value<\/strong><\/td> | Description<\/strong><\/td><\/tr><\/thead> | Name<\/td> | POTS Admin<\/td> | Identifies the role for assignment to users<\/td><\/tr> | Description<\/td> | (optional)<\/td> | Explains the intended purpose of the role<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n | <\/figure>\n\n\n\nStep 2: Set User Level and Scope<\/strong><\/h3>\n\n\n\n
|