Access Canvas User Group

Only authorized users can configure and manage role-based access settings. By assigning the Access Canvas group, you decide who can control visibility, permissions, and UI configurations for others in the system.

User Role Configuration

Use this screen to create a User Role, which acts as a centralized template for permissions and system configurations. By selecting multiple existing users, you instantly apply the role's entire set of access rights and custom configurations to them simultaneously, guaranteeing consistent permissions and saving significant time.

This user profile shows the groups before a User Role has been assigned.

This user profile shows the groups after a User Role has been assigned.

Model Access Configuration

The Model Access tab provides granular control over what users with this role can do with specific models within the application. While the Model Access allows you to override or fine-tune those permissions for individual types of records.

you can restrict their ability to create, delete, update, import, export, print, archive, or unarchive records of a certain type (e.g., allow a Salesperson to see all products, but not delete them).

Before restricting the Create access for a sales order, the Create button is visible to the user.

Apply creation access restriction for sales order

After restricting the Create access for a sales order, the Create button is hidden from the user.

Before restricting the update (Write) access for a purchase order, user can update anything as per their groups access

Apply a write (Update) access restriction for purchase order

After restricting the update (Write) access for a purchase order, user can not update anything for that model.

Before restricting the delete access for a product, the delete option is visible to the user.

Apply a delete access restriction for products

After restricting the delete access for a products, the delete option is hidden from the user.

Before restricting the archive and unarchive access for a contact, the archive and unarchive option is visible to the user.

Apply a archive and unarchive access restriction for contacts

After restricting the archive and unarchive access for a contacts, the archive and unarchive option is hidden from the user.

Before restricting the import and export access for transfers, the import and export options are visible to the user.

Apply import and export access restriction for transfers.

After restricting the import and export access for shipments, the import and export options is not visible from users

Before restricting the duplicate access for leads, the duplicate option is visible to the user.

Apply duplicate access restriction for leads

After restricting the duplicate access for leads, the duplicate option is hidden from the user.

Before restricting the print access for a invoice, the print option is visible to the user.

Apply print access restriction for invoicing

After restricting the print access for invoicing, the print option is hidden from the user.

Hide Menus Configuration

The Hide Menus tab offers a simple way to customize and simplify the user interface by restricting visibility. You can choose to hide main menus (like Sales or Inventory) or their sub-menus (like Quotations or Products). Hiding menus not only prevents users from accessing specific features but also makes the navigation bar less cluttered, providing a more focused experience for the users in this role.

Sales menu is visible to the user

Select sales menu to hide for this role

Sales menu hidden from user

Vendors menu from purchase application is visible to the user

Select vendors menu to hide for this role

Vendors menu from purchase hidden from user

Deliveries menu from inventory application is visible to the user

Select deliveries menu to hide for this role

Deliveries menu from inventory application hidden from user

Fields Configurations

The Fields Configurations tab gives you detailed control by allowing you to set permissions for individual fields on a form, rather than entire records. For a selected data model and field, you can choose to make it Invisible (hiding it completely from the user), Readonly (allowing the user to see the data but preventing any edits), or Required (forcing the user to enter a value before saving). This ensures sensitive information is protected and guides the user toward accurate and complete data entry.

Cost is visible in products to user

We will apply field restriction to cost field invisible in product

Cost field is invisible in products from user

Phone, mobile and email fields are visible in contact to user

We will apply field restriction to phone, email, and mobile fields invisible in contact

Phone, mobile and email fields are invisible in contact from user

Expected arrival field is optional.

We will apply field configuration to expected arrival field as required.

Expected arrival field is required.

Operation type field is editable to user

We will configure operation type in inventory to readonly under field configurations tabs so user won't able to change it.

Operation type field is readonly. It means user can not modify that value.

Hide Groupby and Filter

The Hide Groupby and Filter tab allows you to streamline a user's view by controlling the default search and filtering options available on specific screens. You can select a data Model (e.g., Invoices, Opportunities) and then choose to hide either specific Filters or Grouping options that are confusing or unnecessary for the user's role. This customization makes the search bar cleaner and focuses users on the relevant ways they are permitted to view and analyze data.

To pay, In payment, and overdue filters are visible to user and Sales team, payment method and journals group by are visible to user.

Apply restriction to hide filters and group by for invoice

To pay, In payment, and overdue filters are invisible to users and Sales team, payment method and journals group by are invisible to users.

Not acknowledged filter and vendor, buyer group by are visible to users

Apply restriction to hide filters and group by for purchase

Apply restriction to hide filters and group by for purchase

Hide Views

The Hide Views tab allows you to control how users with this role can visualize and interact with data by hiding specific view types. When configuring a data Model (e.g., Products, Sale Orders), you can select the View Type (e.g., Kanban, List, Graph) that you want to hide. This is useful for removing complex analysis views like Pivot or Graph for users who only need simple data entry (Form view) or quick overviews (List view), ensuring a cleaner and more task-focused interface.

Activity view in transfer is visible to user

Restrict activity view in transfer

Pivot, graph, and activity views in purchase is visible to user

Pivot, graph, and activity views in purchase is visible to user

Restrict graph, pivot and activity views in purchase order

Hide Buttons / Page

The Hide Buttons / Page tab provides a critical level of customization by allowing you to hide specific interaction points from users within a form. You can choose a data Model (e.g., Customer, Employee) and then select a specific Button (e.g., Confirm, Cancel, or Smart Buttons) or an entire Page (a tab or section within the form). Hiding these elements restricts the actions a user can take or the information they can see, focusing them strictly on their authorized tasks and preventing accidental or unauthorized actions.

Confirm Order and cancel buttons are visible to the user. Also other information tab is visible to the user.

Restrict confirm order and cancel buttons as well as other information tab in purchase order form

Confirm order and cancel buttons are hidden from user. Other information tab also hidden from users.

Hide Chatter

The Hide Chatter tab provides simple control over the visibility of the communication panel at the bottom of record forms. The Chatter is used for logging notes, sending messages, tracking activities, and managing followers. If a specific role does not need to use or see these communication features on certain records (Models), you can hide them here to simplify the interface.

Full chatter is visible to user

Restrict full chatter for purchase order

Whole chatter is hidden from purchase order from user

Log note button is visible in chatter.

Restrict log note button for purchase order in chatter

Log note button is hidden for purchase order in chatter from user.

Send message button is visible in chatter.

Restrict send message button for purchase order in chatter

Send message button is hidden for purchase order in chatter from user.

Activities button is visible in chatter.

Restrict activities button for purchase order in chatter

Activities button is hidden for purchase order in chatter from user.

Follower icon is visible in chatter.

Restrict follower icon for purchase order in chatter

Follower icon is hidden for purchase order in chatter from user.

Attachments icon is visible in chatter.

Restrict attachments icon for purchase order in chatter

Attachments icon is hidden for purchase order in chatter from user.

Report Menus

The Report Menus tab gives you the ability to hide specific Printable Reports from users in this role. When a user is viewing a record (like a Sale Order or an Invoice), they often have access to a print button that generates various PDF reports (e.g., Pro-Forma Invoice, Delivery Slip). By selecting a Report here, you can prevent users from generating that specific document, simplifying the print options and restricting access to sensitive reports.

Quotation / Order report in sales app is showing to user.

Restrict Quotation / Order report in sales app for user.

Quotation / Order report in sales app is hidden from user.

Delivery Slip and picking operations report in transfer are visible to user

Restrict Delivery Slip and picking operations report in transfer for user.

Delivery Slip and picking operations report in transfer is hidden from user.

Hide Actions

The Hide Actions tab is the final layer of control, allowing you to hide specific server-side Actions or commands found within the gear icon (Action menu) on a record form. Hiding an action prevents the user from initiating that specific command, ensuring they only perform authorized operations.

"Accrued Revenue Entry" Server action is visible to users

Restrict "Accrued Revenue Entry" Server action for sales order

"Accrued Revenue Entry" Server action is hidden from user

"Share, generate a Payment Link and Switch into invoice/credit note" Server action from invoices/bills are visible to users

Restrict "Share, generate a Payment Link and Switch into invoice/credit note" Server action for invoices/bills

"Share, generate a Payment Link and Switch into invoice/credit note" Server action is hidden from user in invoices

Global Configurations

Global Readonly Permission

The Readonly checkbox is a powerful global permission that instantly applies a severe restriction across the entire application. When enabled, it makes all records view-only for users assigned to this role. This globally prevents the user from creating, editing, or deleting any data, ensuring they can observe information but cannot make any changes anywhere in the system.

Global Chatter Permission

The Chatter checkbox controls whether users assigned to this role can view the communication panel on any record form (like a Sale Order, Customer, or Invoice). When this box is checked, the entire Chatter section—including Log Notes, Messages, Activities, and Followers—is hidden globally from the user's view across all modules. This is typically used to simplify the interface or restrict a role to only viewing core data without communication access.

Global Import Permission

The Import checkbox controls the user's ability to use the bulk data import functionality across the entire application. When checked, the user is restricted from using the Import button that typically appears on list views (like Customers, Products, etc.). This is a crucial security feature used to prevent unauthorized or incorrect mass data uploads into the system's database.

Global Export Permission

The Export checkbox controls the user's ability to use the bulk data export functionality across the entire application. When checked, the user is restricted from using the Export option that typically appears in the Action menu (gear icon) on list views. This is a critical security feature used to prevent the unauthorized mass download of sensitive company data (like customer lists, product pricing, or financial records) from the system.

Global Duplicate Permission

The Duplicate checkbox controls the user's ability to use the Duplicate function to clone existing records across the entire application (e.g., duplicating a customer, product, or sale order). When checked, the user is restricted from duplicating any records. This is typically used to enforce strict processes or prevent the unnecessary creation of identical data.

Global Delete Permission

The Delete checkbox controls the user's ability to permanently remove existing records across the entire application. When checked, the user is restricted from using the Delete action on all record forms (usually found in the Action menu or a dedicated button). This is a vital security control used to prevent the unauthorized or accidental destruction of company data.

Global Disable Developer Mode Permission

The Disable Developer Mode checkbox is used to prevent users in this role from activating the application's technical features. When checked, the user cannot access the technical menu, which contains advanced settings for models, views, server actions, and other configurations. This is a vital security and stability measure used to ensure non-technical users cannot accidentally view or change core system settings.

Company Specific Configuration

The Company Specific checkbox allows you to define whether the permissions set in this User Role should be restricted to a specific company or group of companies within your database.

When Unchecked (Global Access): If the Company Specific box is left unchecked, the User Role and all its assigned permissions (groups, menu restrictions, field configurations, etc.) are applied to the user across all companies they have access to. The access is the same no matter which company the user is currently working in.

When Checked (Specific Access): When the box is checked, a Company field appears (as seen in the screenshot). You must select one or more companies here. This ensures that all permissions and restrictions defined in this User Role (the groups, hidden menus, global settings, etc.) are only active when the user is logged into one of the selected companies. If the user switches to a different, unlisted company, the permissions from this specific role will not apply.

This feature is essential for ensuring that complex roles are correctly applied in the right organizational context, providing a highly flexible and secure structure for multi-company operations.