Flexible permissions
Manage user groups. Bind access rights to fields and entities in the admin part and the employee interface
Permissions group
Detailed list of fields and level of access to them specific for each user of your company
No access
Partial view
View without editing
Full access
Quickly update groups
At any time you can update the user's permissions to expand or restrict their capabilities in the system
Staff access permissions that follow the roles people actually have
Once several people use the system, someone decides who sees and changes what. Without an extra module, every user gets one of the standard roles: a company manager with full access, a branch administrator who is locked out of the clients section so the database cannot be downloaded, and a specialist who sees only their own schedule and settings. Flexible permissions let you set staff access permissions far more precisely than those three presets. This is not about distrust: every unnecessary right is responsibility a person never asked for.
Everything is built on groups. Each group combines two kinds of rules. Permission rules open or close whole sections and the actions inside them: viewing, creating, editing, importing or exporting appointments, orders, events, the cash register, the warehouse, reports, reviews or statistics, and each rule makes the action either allowed or forbidden. Field rules work at a finer level and decide whether a person sees a particular field on a form, such as a client's phone number.
Some permissions add a scope, so a rule applies only to certain branches, resources or statuses. That way a branch administrator runs their own schedule without wandering into the next location, the front desk sees appointments but cannot change employee schedules or the service list, and an accountant works with finances and reports without being able to edit appointments.
Time can be limited too. An option for access relative to today opens appointments and documents only within a window of days around the current date, and a separate rule hides anything created more than 31 days ago. A new hire works with the current schedule, not the company's history.
An employee who signs in from a phone gets the same limits, because the staff mobile app runs under that person's user and access level. Flexible permissions are on the feature list for a real estate agency, where hiding client contacts from employees protects a database that belongs to the business rather than to whoever works with it.
Questions before you split up access
Do we have to build every group from scratch?
No. Ready-made group templates cover typical restrictions, and a custom group starts with nothing but a name; you add rules after saving it. The article on creating your own permission groups walks through it.
How do I give a trainee the bare minimum for their first weeks?
The module adds a restricted role that has no permissions at all by default. You open only what is needed through rules that allow it, for example viewing appointments, resources and services. The person sees the branch schedule but cannot edit it and never sees the finances.
What happens to these settings if our license expires?
The module's rules stop applying, and every user automatically falls back to the access of their base role. Plan for that if your restrictions guard the cash register or client contacts.
Can an employee see their colleagues' appointments?
That depends on their group. Out of the box, specialists work with their own calendar only, and access to other people's calendars is opened by a separate permission that can be narrowed to specific resources or a single branch.
Can staff recognize a client without seeing the full phone number?
Yes. The partial view level for contact fields shows only a fragment, such as the last digits of the number, so an employee knows who is calling but cannot export the client base. The no-access level hides the field completely.