Roles and functional permissions are used to control what users can see and do in the system. By assigning one or more roles, users are granted access to relevant functions, modules, and data based on their work tasks.

This chapter describes a recommended structure for roles and associated permission ranges. It provides guidance on which objects may be appropriate to read and write for each role. The structure is intended as a starting point and can be adapted to suit the needs of the organization.

A role consists of a set of permissions. Roles can be combined to provide the appropriate access for different types of users. This makes permission management easier, especially in organizations with many users or varying responsibilities.

More information

For more information on how permissions are managed and customized, see the chapter on the Rights editor. It describes how you can:

•Modify existing permissions

•Create your own ranges

•Work with exceptions and subtype ranges