Rights and Roles

General Information

A user can have multiple roles, each role containing different access rights.
A user without any role is able to login to our Webportal, but will not find any menu entries but managing the own user profile only.

Roles and Rights

Role	Description	Rights
Super User	The initial User has this role. Has rights for everything.	Everything
Admin	To be used to configue the tenant, create API keys and manage Users	Access Management read/write Tenant Management read/write
Auditor	To be used for auditing purposes and for users that should not be able to change anything.	Read for everything
Order Manager & Customer Support	To be used for creating and managing Orders and Contracts. Suitable for Sales and Customer Support	Tenant Management read Contract and Order Management read/write Document Management read/write Product Management read Accounts Receivable Management read Customer Management read/write Tax Management read
Finance Manager	To be used for more complex accounting tasks, such as configuring the chart of Accounts, creating reports etc.	Tenant Management read Accounting Management read/write Clearing read/write Reports read/write Document Management read/write Customer Management read Contract Management read Product Management read Draft Document Management read/Write Tax Management read/write Accounts Receivable Management read
Accounts Receivable (AR) Manager	To be used for day-to-day accounting tasks, such as AR management.	Accounts Receivable Management read/write Customer Management read Clearing read/write Document Management read/write Tenant Management read Accounting Management read Reports read Contract Management read Product Management read Tax Management read
Product Manager	To be used to set up products and plans.	Product Management read/write Tenant Management read
Beta Preview	Access to experimental Webportal features that aren't officially released. A Beta user will only gain access to the features within his other role(s).	n/a

Rights Descriptions

Right	Description	Typical Actions
Access Management read	Read access to users, roles, and permissions.	View users, review roles, inspect permissions
Access Management write	Manage users, roles, and permissions.	Create/delete users, assign roles, modify permissions
Accounting Management read	Read access to accounting data, accounts, and reports.	View accounts, bookings, and reports
Accounting Management write	Manage all accounting data.	Create bookings, close accounting periods, manage accounts
Accounts Receivable Management read	Read access to open items (OPOS) and receivables.	View receivables and open item cases
Accounts Receivable Management write	Accounts Receivable	Manage open item cases and receivables.
Contract and Order Management read	Read access to contracts, orders, and billable items.	View contracts and orders
Contract and Order Management write	Manage contracts, orders, and billing runs.	Create contracts, start billing runs
Clearing read	Read access to clearing runs and booking allocations.	View clearing runs, inspect bookings
Clearing write	Manage clearing runs and booking allocations.	Execute clearing runs, modify bookings
Customer Management read	Read access to customers, debtors, and payment data.	View customers, inspect payment accounts
Customer Management write	Manage customer and payment master data.	Create customers, manage debtors
Document Management read	Read access to final invoices and credit notes.	View invoices, download documents
Document Management write	Create and modify final documents.	Generate, correct, and reissue invoices
Draft Document Management read	Read access to draft documents.	View drafts
Draft Document Management write	Manage draft documents.	Create and edit drafts
Product Management read	Read access to product catalogs and pricing structures.	View products and prices
Product Management write	Manage products and pricing.	Modify products and prices
Report Management read	Read access to reports.	Download reports
Report Management write	Manage and delete reports.	Create and delete reports
Tax Management read	Read access to tax rules and tax configurations.	View tax rules
Tax Management write	Manage all tax rules and tax providers.	Modify tax rules, configure providers
Tenant Management read	Read access to global tenant configurations.	View billing, payment, and reporting configurations
Tenant Management write	Manage all global tenant settings.	Modify billing, payment, reporting, and global configurations

Deprecated Roles

Older users might still have deprecated roles assigned to them. Those deprecated roles will be removed by 2025-10-01. Users that only have deprecated roles assigned to them by this point might lose access to some of the system, so we recommend changing the roles of all users to the v2 roles defined above.