![\"\"](\"https:\/\/tenthplanet.in\/idempiere\/wp-content\/uploads\/sites\/13\/2026\/07\/TenthPlanet-iDempeire-GeneralRules-AllRoles-1024x446.png\" "\\"\\"")
<\/figure>\n\n\n\nBusiness Rules<\/strong><\/h2>\n\n\n\n\n- Only Active roles can be assigned to users for login.<\/li>\n\n\n\n
- User Level determines whether a role sees System, Client, or Organization data.<\/li>\n\n\n\n
- Client+Organization level restricts a role to its assigned store only.<\/li>\n\n\n\n
- Can Export controls whether a role may extract data to file.<\/li>\n\n\n\n
- Can Report controls whether a role may run standard reports.<\/li>\n\n\n\n
- Show Accounting controls visibility of GL and financial postings.<\/li>\n\n\n\n
- Access all Orgs allows a role to view data across multiple stores.<\/li>\n<\/ul>\n\n\n\n
Prerequisites<\/strong><\/h2>\n\n\n\n\n- Tenant (Client) configured for the retail business.<\/li>\n\n\n\n
- Organization or store record configured.<\/li>\n\n\n\n
- User accounts created in the User window.<\/li>\n\n\n\n
- Org Access and Document Action Access reviewed for each role.<\/li>\n<\/ul>\n\n\n\n
Navigation<\/strong><\/h2>\n\n\n\nMenu \u2192 General Rules \u2192 Security \u2192 Role<\/p>\n\n\n\n
Configuration Steps<\/strong><\/h2>\n\n\n\nStep 1: Review Tenant and Name Fields<\/strong><\/h3>\n\n\n\nCheck the Tenant (All) and Name fields, e.g., ‘POTS’ and ‘POTS Admin’, match the intended store or business unit.<\/p>\n\n\n\n![\"\"](\"https:\/\/tenthplanet.in\/idempiere\/wp-content\/uploads\/sites\/13\/2026\/07\/TenthPlanet-iDempiere-AllRoles-1024x249.png\" "\\"\\"")
<\/figure>\n\n\n\nStep 2: Verify User Level and Preference Level<\/strong><\/h3>\n\n\n\nConfirm User Level matches the intended scope (e.g., Client+Organization for store-level roles) and Preference Level is set correctly.<\/p>\n\n\n\n
Step 3: Check Function Permission Checkboxes<\/strong><\/h3>\n\n\n\nReview Can Export, Can Report, Show Accounting, and Access Advanced to confirm they match the role’s intended responsibilities.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Tenant (All)<\/td> POTS<\/td> Client\/tenant the role belongs to<\/td><\/tr> Name<\/td> POTS Admin<\/td> Role display name shown at login<\/td><\/tr> User Level<\/td> Client+Organization<\/td> Defines System, Client, or Organization data scope<\/td><\/tr> Preference Level<\/td> Client<\/td> Level at which user preferences and defaults apply<\/td><\/tr> Can Export<\/td> Checked<\/td> Allows exporting grid data to file<\/td><\/tr> Can Report<\/td> Checked<\/td> Allows running standard reports<\/td><\/tr> Show Accounting<\/td> Checked<\/td> Allows viewing GL and accounting facts<\/td><\/tr> Access Advanced<\/td> Checked<\/td> Enables access to advanced tabs and fields<\/td><\/tr> Active<\/td> Checked<\/td> Role is enabled and assignable to users<\/td><\/tr> Role Type<\/td> Blank<\/td> Optional classification, e.g., Manager, Cashier<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 4: Confirm Active Status<\/strong><\/h3>\n\n\n\nVerify the Active checkbox is ticked for any role currently in use by store staff.<\/p>\n\n\n\n
Step 5: Cross-check Role Type for Store Assignment<\/strong><\/h3>\n\n\n\nConfirm Role Type is set consistently so store onboarding staff can assign the correct role without confusion.<\/p>\n\n\n\n
Common Issues and Resolutions<\/strong><\/h2>\n\n\n\nIssue<\/strong><\/td>Cause<\/strong><\/td>Resolution<\/strong><\/td><\/tr><\/thead>Role not available at login<\/td> Active checkbox unticked<\/td> Activate the role in the Role window<\/td><\/tr> User sees data from other stores<\/td> Access all Orgs enabled<\/td> Disable Access all Orgs for store-level roles<\/td><\/tr> Staff cannot export reports<\/td> Can Export unchecked<\/td> Enable Can Export for the role<\/td><\/tr> Role changes not applied to user<\/td> Active session cached old role<\/td> Ask user to log out and log back in<\/td><\/tr> Duplicate or unclear role names<\/td> No naming convention used<\/td> Standardize names, e.g., Store-Cashier, Store-Manager<\/td><\/tr> New store staff cannot access org data<\/td> Organization missing from role access<\/td> Add the organization in the Org Access tab<\/td><\/tr> Inconsistent report results between roles<\/td> Different Preference Level settings<\/td> Align Preference Level across similar roles<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nNext Steps<\/strong><\/h2>\n\n\n\n\n- Configure User window to assign reviewed roles to staff.<\/li>\n\n\n\n
- Set up Org Access tab for store-specific data restrictions.<\/li>\n\n\n\n
- Review Document Action Access for transaction-level permissions.<\/li>\n\n\n\n
- Configure Client Info for tenant-wide retail settings.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
The Role window in iDempiere defines the security profile assigned to every user, controlling what data, organizations, and functions they […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91,10],"tags":[],"class_list":["post-22129","post","type-post","status-publish","format-standard","hentry","category-idempiere-general-rules","category-idempiere-product"],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=22129"}],"version-history":[{"count":2,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions"}],"predecessor-version":[{"id":22133,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions\/22133"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=22129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=22129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=22129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Prerequisites<\/strong><\/h2>\n\n\n\n\n- Tenant (Client) configured for the retail business.<\/li>\n\n\n\n
- Organization or store record configured.<\/li>\n\n\n\n
- User accounts created in the User window.<\/li>\n\n\n\n
- Org Access and Document Action Access reviewed for each role.<\/li>\n<\/ul>\n\n\n\n
Navigation<\/strong><\/h2>\n\n\n\nMenu \u2192 General Rules \u2192 Security \u2192 Role<\/p>\n\n\n\n
Configuration Steps<\/strong><\/h2>\n\n\n\nStep 1: Review Tenant and Name Fields<\/strong><\/h3>\n\n\n\nCheck the Tenant (All) and Name fields, e.g., ‘POTS’ and ‘POTS Admin’, match the intended store or business unit.<\/p>\n\n\n\n<\/figure>\n\n\n\nStep 2: Verify User Level and Preference Level<\/strong><\/h3>\n\n\n\nConfirm User Level matches the intended scope (e.g., Client+Organization for store-level roles) and Preference Level is set correctly.<\/p>\n\n\n\n
Step 3: Check Function Permission Checkboxes<\/strong><\/h3>\n\n\n\nReview Can Export, Can Report, Show Accounting, and Access Advanced to confirm they match the role’s intended responsibilities.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Tenant (All)<\/td> POTS<\/td> Client\/tenant the role belongs to<\/td><\/tr> Name<\/td> POTS Admin<\/td> Role display name shown at login<\/td><\/tr> User Level<\/td> Client+Organization<\/td> Defines System, Client, or Organization data scope<\/td><\/tr> Preference Level<\/td> Client<\/td> Level at which user preferences and defaults apply<\/td><\/tr> Can Export<\/td> Checked<\/td> Allows exporting grid data to file<\/td><\/tr> Can Report<\/td> Checked<\/td> Allows running standard reports<\/td><\/tr> Show Accounting<\/td> Checked<\/td> Allows viewing GL and accounting facts<\/td><\/tr> Access Advanced<\/td> Checked<\/td> Enables access to advanced tabs and fields<\/td><\/tr> Active<\/td> Checked<\/td> Role is enabled and assignable to users<\/td><\/tr> Role Type<\/td> Blank<\/td> Optional classification, e.g., Manager, Cashier<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 4: Confirm Active Status<\/strong><\/h3>\n\n\n\nVerify the Active checkbox is ticked for any role currently in use by store staff.<\/p>\n\n\n\n
Step 5: Cross-check Role Type for Store Assignment<\/strong><\/h3>\n\n\n\nConfirm Role Type is set consistently so store onboarding staff can assign the correct role without confusion.<\/p>\n\n\n\n
Common Issues and Resolutions<\/strong><\/h2>\n\n\n\nIssue<\/strong><\/td>Cause<\/strong><\/td>Resolution<\/strong><\/td><\/tr><\/thead>Role not available at login<\/td> Active checkbox unticked<\/td> Activate the role in the Role window<\/td><\/tr> User sees data from other stores<\/td> Access all Orgs enabled<\/td> Disable Access all Orgs for store-level roles<\/td><\/tr> Staff cannot export reports<\/td> Can Export unchecked<\/td> Enable Can Export for the role<\/td><\/tr> Role changes not applied to user<\/td> Active session cached old role<\/td> Ask user to log out and log back in<\/td><\/tr> Duplicate or unclear role names<\/td> No naming convention used<\/td> Standardize names, e.g., Store-Cashier, Store-Manager<\/td><\/tr> New store staff cannot access org data<\/td> Organization missing from role access<\/td> Add the organization in the Org Access tab<\/td><\/tr> Inconsistent report results between roles<\/td> Different Preference Level settings<\/td> Align Preference Level across similar roles<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nNext Steps<\/strong><\/h2>\n\n\n\n\n- Configure User window to assign reviewed roles to staff.<\/li>\n\n\n\n
- Set up Org Access tab for store-specific data restrictions.<\/li>\n\n\n\n
- Review Document Action Access for transaction-level permissions.<\/li>\n\n\n\n
- Configure Client Info for tenant-wide retail settings.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
The Role window in iDempiere defines the security profile assigned to every user, controlling what data, organizations, and functions they […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91,10],"tags":[],"class_list":["post-22129","post","type-post","status-publish","format-standard","hentry","category-idempiere-general-rules","category-idempiere-product"],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=22129"}],"version-history":[{"count":2,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions"}],"predecessor-version":[{"id":22133,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions\/22133"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=22129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=22129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=22129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Navigation<\/strong><\/h2>\n\n\n\nMenu \u2192 General Rules \u2192 Security \u2192 Role<\/p>\n\n\n\n
Configuration Steps<\/strong><\/h2>\n\n\n\nStep 1: Review Tenant and Name Fields<\/strong><\/h3>\n\n\n\nCheck the Tenant (All) and Name fields, e.g., ‘POTS’ and ‘POTS Admin’, match the intended store or business unit.<\/p>\n\n\n\n<\/figure>\n\n\n\nStep 2: Verify User Level and Preference Level<\/strong><\/h3>\n\n\n\nConfirm User Level matches the intended scope (e.g., Client+Organization for store-level roles) and Preference Level is set correctly.<\/p>\n\n\n\n
Step 3: Check Function Permission Checkboxes<\/strong><\/h3>\n\n\n\nReview Can Export, Can Report, Show Accounting, and Access Advanced to confirm they match the role’s intended responsibilities.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Tenant (All)<\/td> POTS<\/td> Client\/tenant the role belongs to<\/td><\/tr> Name<\/td> POTS Admin<\/td> Role display name shown at login<\/td><\/tr> User Level<\/td> Client+Organization<\/td> Defines System, Client, or Organization data scope<\/td><\/tr> Preference Level<\/td> Client<\/td> Level at which user preferences and defaults apply<\/td><\/tr> Can Export<\/td> Checked<\/td> Allows exporting grid data to file<\/td><\/tr> Can Report<\/td> Checked<\/td> Allows running standard reports<\/td><\/tr> Show Accounting<\/td> Checked<\/td> Allows viewing GL and accounting facts<\/td><\/tr> Access Advanced<\/td> Checked<\/td> Enables access to advanced tabs and fields<\/td><\/tr> Active<\/td> Checked<\/td> Role is enabled and assignable to users<\/td><\/tr> Role Type<\/td> Blank<\/td> Optional classification, e.g., Manager, Cashier<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 4: Confirm Active Status<\/strong><\/h3>\n\n\n\nVerify the Active checkbox is ticked for any role currently in use by store staff.<\/p>\n\n\n\n
Step 5: Cross-check Role Type for Store Assignment<\/strong><\/h3>\n\n\n\nConfirm Role Type is set consistently so store onboarding staff can assign the correct role without confusion.<\/p>\n\n\n\n
Common Issues and Resolutions<\/strong><\/h2>\n\n\n\nIssue<\/strong><\/td>Cause<\/strong><\/td>Resolution<\/strong><\/td><\/tr><\/thead>Role not available at login<\/td> Active checkbox unticked<\/td> Activate the role in the Role window<\/td><\/tr> User sees data from other stores<\/td> Access all Orgs enabled<\/td> Disable Access all Orgs for store-level roles<\/td><\/tr> Staff cannot export reports<\/td> Can Export unchecked<\/td> Enable Can Export for the role<\/td><\/tr> Role changes not applied to user<\/td> Active session cached old role<\/td> Ask user to log out and log back in<\/td><\/tr> Duplicate or unclear role names<\/td> No naming convention used<\/td> Standardize names, e.g., Store-Cashier, Store-Manager<\/td><\/tr> New store staff cannot access org data<\/td> Organization missing from role access<\/td> Add the organization in the Org Access tab<\/td><\/tr> Inconsistent report results between roles<\/td> Different Preference Level settings<\/td> Align Preference Level across similar roles<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nNext Steps<\/strong><\/h2>\n\n\n\n\n- Configure User window to assign reviewed roles to staff.<\/li>\n\n\n\n
- Set up Org Access tab for store-specific data restrictions.<\/li>\n\n\n\n
- Review Document Action Access for transaction-level permissions.<\/li>\n\n\n\n
- Configure Client Info for tenant-wide retail settings.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
The Role window in iDempiere defines the security profile assigned to every user, controlling what data, organizations, and functions they […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91,10],"tags":[],"class_list":["post-22129","post","type-post","status-publish","format-standard","hentry","category-idempiere-general-rules","category-idempiere-product"],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=22129"}],"version-history":[{"count":2,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions"}],"predecessor-version":[{"id":22133,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions\/22133"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=22129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=22129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=22129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Step 1: Review Tenant and Name Fields<\/strong><\/h3>\n\n\n\nCheck the Tenant (All) and Name fields, e.g., ‘POTS’ and ‘POTS Admin’, match the intended store or business unit.<\/p>\n\n\n\n<\/figure>\n\n\n\nStep 2: Verify User Level and Preference Level<\/strong><\/h3>\n\n\n\nConfirm User Level matches the intended scope (e.g., Client+Organization for store-level roles) and Preference Level is set correctly.<\/p>\n\n\n\n
Step 3: Check Function Permission Checkboxes<\/strong><\/h3>\n\n\n\nReview Can Export, Can Report, Show Accounting, and Access Advanced to confirm they match the role’s intended responsibilities.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Tenant (All)<\/td> POTS<\/td> Client\/tenant the role belongs to<\/td><\/tr> Name<\/td> POTS Admin<\/td> Role display name shown at login<\/td><\/tr> User Level<\/td> Client+Organization<\/td> Defines System, Client, or Organization data scope<\/td><\/tr> Preference Level<\/td> Client<\/td> Level at which user preferences and defaults apply<\/td><\/tr> Can Export<\/td> Checked<\/td> Allows exporting grid data to file<\/td><\/tr> Can Report<\/td> Checked<\/td> Allows running standard reports<\/td><\/tr> Show Accounting<\/td> Checked<\/td> Allows viewing GL and accounting facts<\/td><\/tr> Access Advanced<\/td> Checked<\/td> Enables access to advanced tabs and fields<\/td><\/tr> Active<\/td> Checked<\/td> Role is enabled and assignable to users<\/td><\/tr> Role Type<\/td> Blank<\/td> Optional classification, e.g., Manager, Cashier<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 4: Confirm Active Status<\/strong><\/h3>\n\n\n\nVerify the Active checkbox is ticked for any role currently in use by store staff.<\/p>\n\n\n\n
Step 5: Cross-check Role Type for Store Assignment<\/strong><\/h3>\n\n\n\nConfirm Role Type is set consistently so store onboarding staff can assign the correct role without confusion.<\/p>\n\n\n\n
Common Issues and Resolutions<\/strong><\/h2>\n\n\n\nIssue<\/strong><\/td>Cause<\/strong><\/td>Resolution<\/strong><\/td><\/tr><\/thead>Role not available at login<\/td> Active checkbox unticked<\/td> Activate the role in the Role window<\/td><\/tr> User sees data from other stores<\/td> Access all Orgs enabled<\/td> Disable Access all Orgs for store-level roles<\/td><\/tr> Staff cannot export reports<\/td> Can Export unchecked<\/td> Enable Can Export for the role<\/td><\/tr> Role changes not applied to user<\/td> Active session cached old role<\/td> Ask user to log out and log back in<\/td><\/tr> Duplicate or unclear role names<\/td> No naming convention used<\/td> Standardize names, e.g., Store-Cashier, Store-Manager<\/td><\/tr> New store staff cannot access org data<\/td> Organization missing from role access<\/td> Add the organization in the Org Access tab<\/td><\/tr> Inconsistent report results between roles<\/td> Different Preference Level settings<\/td> Align Preference Level across similar roles<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nNext Steps<\/strong><\/h2>\n\n\n\n\n- Configure User window to assign reviewed roles to staff.<\/li>\n\n\n\n
- Set up Org Access tab for store-specific data restrictions.<\/li>\n\n\n\n
- Review Document Action Access for transaction-level permissions.<\/li>\n\n\n\n
- Configure Client Info for tenant-wide retail settings.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
The Role window in iDempiere defines the security profile assigned to every user, controlling what data, organizations, and functions they […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91,10],"tags":[],"class_list":["post-22129","post","type-post","status-publish","format-standard","hentry","category-idempiere-general-rules","category-idempiere-product"],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=22129"}],"version-history":[{"count":2,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions"}],"predecessor-version":[{"id":22133,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions\/22133"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=22129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=22129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=22129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
<\/figure>\n\n\n\nStep 2: Verify User Level and Preference Level<\/strong><\/h3>\n\n\n\nConfirm User Level matches the intended scope (e.g., Client+Organization for store-level roles) and Preference Level is set correctly.<\/p>\n\n\n\n
Step 3: Check Function Permission Checkboxes<\/strong><\/h3>\n\n\n\nReview Can Export, Can Report, Show Accounting, and Access Advanced to confirm they match the role’s intended responsibilities.<\/p>\n\n\n\nField<\/strong><\/td>Sample Value<\/strong><\/td>Description<\/strong><\/td><\/tr><\/thead>Tenant (All)<\/td> POTS<\/td> Client\/tenant the role belongs to<\/td><\/tr> Name<\/td> POTS Admin<\/td> Role display name shown at login<\/td><\/tr> User Level<\/td> Client+Organization<\/td> Defines System, Client, or Organization data scope<\/td><\/tr> Preference Level<\/td> Client<\/td> Level at which user preferences and defaults apply<\/td><\/tr> Can Export<\/td> Checked<\/td> Allows exporting grid data to file<\/td><\/tr> Can Report<\/td> Checked<\/td> Allows running standard reports<\/td><\/tr> Show Accounting<\/td> Checked<\/td> Allows viewing GL and accounting facts<\/td><\/tr> Access Advanced<\/td> Checked<\/td> Enables access to advanced tabs and fields<\/td><\/tr> Active<\/td> Checked<\/td> Role is enabled and assignable to users<\/td><\/tr> Role Type<\/td> Blank<\/td> Optional classification, e.g., Manager, Cashier<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nStep 4: Confirm Active Status<\/strong><\/h3>\n\n\n\nVerify the Active checkbox is ticked for any role currently in use by store staff.<\/p>\n\n\n\n
Step 5: Cross-check Role Type for Store Assignment<\/strong><\/h3>\n\n\n\nConfirm Role Type is set consistently so store onboarding staff can assign the correct role without confusion.<\/p>\n\n\n\n
Common Issues and Resolutions<\/strong><\/h2>\n\n\n\nIssue<\/strong><\/td>Cause<\/strong><\/td>Resolution<\/strong><\/td><\/tr><\/thead>Role not available at login<\/td> Active checkbox unticked<\/td> Activate the role in the Role window<\/td><\/tr> User sees data from other stores<\/td> Access all Orgs enabled<\/td> Disable Access all Orgs for store-level roles<\/td><\/tr> Staff cannot export reports<\/td> Can Export unchecked<\/td> Enable Can Export for the role<\/td><\/tr> Role changes not applied to user<\/td> Active session cached old role<\/td> Ask user to log out and log back in<\/td><\/tr> Duplicate or unclear role names<\/td> No naming convention used<\/td> Standardize names, e.g., Store-Cashier, Store-Manager<\/td><\/tr> New store staff cannot access org data<\/td> Organization missing from role access<\/td> Add the organization in the Org Access tab<\/td><\/tr> Inconsistent report results between roles<\/td> Different Preference Level settings<\/td> Align Preference Level across similar roles<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nNext Steps<\/strong><\/h2>\n\n\n\n\n- Configure User window to assign reviewed roles to staff.<\/li>\n\n\n\n
- Set up Org Access tab for store-specific data restrictions.<\/li>\n\n\n\n
- Review Document Action Access for transaction-level permissions.<\/li>\n\n\n\n
- Configure Client Info for tenant-wide retail settings.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
The Role window in iDempiere defines the security profile assigned to every user, controlling what data, organizations, and functions they […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91,10],"tags":[],"class_list":["post-22129","post","type-post","status-publish","format-standard","hentry","category-idempiere-general-rules","category-idempiere-product"],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=22129"}],"version-history":[{"count":2,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions"}],"predecessor-version":[{"id":22133,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions\/22133"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=22129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=22129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=22129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Review Can Export, Can Report, Show Accounting, and Access Advanced to confirm they match the role’s intended responsibilities.<\/p>\n\n\n\n Verify the Active checkbox is ticked for any role currently in use by store staff.<\/p>\n\n\n\n Confirm Role Type is set consistently so store onboarding staff can assign the correct role without confusion.<\/p>\n\n\n\n The Role window in iDempiere defines the security profile assigned to every user, controlling what data, organizations, and functions they […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91,10],"tags":[],"class_list":["post-22129","post","type-post","status-publish","format-standard","hentry","category-idempiere-general-rules","category-idempiere-product"],"_links":{"self":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/comments?post=22129"}],"version-history":[{"count":2,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions"}],"predecessor-version":[{"id":22133,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/posts\/22129\/revisions\/22133"}],"wp:attachment":[{"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/media?parent=22129"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/categories?post=22129"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenthplanet.in\/idempiere\/wp-json\/wp\/v2\/tags?post=22129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Field<\/strong><\/td> Sample Value<\/strong><\/td> Description<\/strong><\/td><\/tr><\/thead> Tenant (All)<\/td> POTS<\/td> Client\/tenant the role belongs to<\/td><\/tr> Name<\/td> POTS Admin<\/td> Role display name shown at login<\/td><\/tr> User Level<\/td> Client+Organization<\/td> Defines System, Client, or Organization data scope<\/td><\/tr> Preference Level<\/td> Client<\/td> Level at which user preferences and defaults apply<\/td><\/tr> Can Export<\/td> Checked<\/td> Allows exporting grid data to file<\/td><\/tr> Can Report<\/td> Checked<\/td> Allows running standard reports<\/td><\/tr> Show Accounting<\/td> Checked<\/td> Allows viewing GL and accounting facts<\/td><\/tr> Access Advanced<\/td> Checked<\/td> Enables access to advanced tabs and fields<\/td><\/tr> Active<\/td> Checked<\/td> Role is enabled and assignable to users<\/td><\/tr> Role Type<\/td> Blank<\/td> Optional classification, e.g., Manager, Cashier<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n Step 4: Confirm Active Status<\/strong><\/h3>\n\n\n\n
Step 5: Cross-check Role Type for Store Assignment<\/strong><\/h3>\n\n\n\n
Common Issues and Resolutions<\/strong><\/h2>\n\n\n\n
Issue<\/strong><\/td> Cause<\/strong><\/td> Resolution<\/strong><\/td><\/tr><\/thead> Role not available at login<\/td> Active checkbox unticked<\/td> Activate the role in the Role window<\/td><\/tr> User sees data from other stores<\/td> Access all Orgs enabled<\/td> Disable Access all Orgs for store-level roles<\/td><\/tr> Staff cannot export reports<\/td> Can Export unchecked<\/td> Enable Can Export for the role<\/td><\/tr> Role changes not applied to user<\/td> Active session cached old role<\/td> Ask user to log out and log back in<\/td><\/tr> Duplicate or unclear role names<\/td> No naming convention used<\/td> Standardize names, e.g., Store-Cashier, Store-Manager<\/td><\/tr> New store staff cannot access org data<\/td> Organization missing from role access<\/td> Add the organization in the Org Access tab<\/td><\/tr> Inconsistent report results between roles<\/td> Different Preference Level settings<\/td> Align Preference Level across similar roles<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n Next Steps<\/strong><\/h2>\n\n\n\n
\n