Appendix A — Permission reference

Every module and feature code in the product, what it unlocks, and which chapter covers it.

How to read this. Access is granted as module → feature → rights. Rights are view, create, edit, delete, import, export and approve. View is the gate: without it the menu item is hidden and the address is refused. See Chapter 4 for the full explanation.

ADMIN — Administration

Chapter 4, Chapter 26

Feature	Unlocks
`user_mgmt`	Administration hub, user list and detail, creating and editing users, activation and deactivation, advanced and effective permissions, workspace backup and restore
`role_mgmt`	Role management: create, edit, delete roles; the permission grid; assigning roles to users
`employee_location_quick_add`	Quick-add of a work location from the employee form

COMPANY — Company and organisation

Chapter 3

Feature	Unlocks
`company_setup`	Company list, creation, detail and editing
`dept_mgmt`	Departments: list, create, detail, edit, status, bulk management
`designation_mgmt`	Designations: list, create, detail, edit, delete, status, and the hierarchy views

PARTNERS — Partners and campaigns

Chapter 5, Chapter 20

Feature	Unlocks
`partner_view`	Partner dashboard and list, creating and editing partners, addresses, contacts, banks; campaigns and contributions
`partner_config`	Partner types, tags, industries, prefixes, number ranges, sales teams

sales — Sales

Chapter 6

Feature	Unlocks
`sales_dashboard`	The sales dashboard
`sales_orders`	Quotations and sales orders: list, create, edit, confirm, cancel, unlock, create delivery, create invoice; pricelists and prices
`sales_teams`	Sales team performance report

purchase — Purchase

Chapter 7

Feature	Unlocks
`purchase_dashboard`	The purchase dashboard
`purchase_rfq`	Requests for quotation: list, create, edit, send, cancel, convert to order
`purchase_orders`	Purchase orders: list, create, edit, confirm, cancel, unlock, create receipt, create bill

INVENTORY — Inventory

Chapter 8

Feature	Unlocks
`inventory_dashboard`	The inventory dashboard
`item_catalog`	Items, item types, units and unit categories, item import
`warehouse_config`	Warehouses, locations, warehouse users, routes and rules
`stock_operations`	Transfers: list, create, edit, return, validate, add and edit moves
`stock_picking_types`	Operation types
`traceability`	Lots and serial numbers, packages
`inventory_adjustments`	Stock adjustments, adjustment history, scrap, count sheets
`reordering_rules`	Reordering rules and the scheduler
`landed_cost`	Landed costs and posting them
`inventory_reports`	Valuation, current stock, transactions, stock ledger, stock trial balance, replenishment, and their exports

WMS_REPORTS — Warehouse views

Chapter 9

Feature	Unlocks
`wms_dashboard`	The warehouse dashboard
`wms_shelf_dashboard`	Shelf occupancy
`wms_main_stock`	Main warehouse stock
`wms_transit_stock`	Transit warehouse stock

WMS_TRANSACTIONS — Warehouse operations

Feature	Unlocks
`wms_transit_allocation`	Transit allocation and putaway. Create rights are required to post reservations or execute.
`wms_storage_transfer`	Bin-to-bin transfers and their printed logs
`wms_storage_to_bins`	Placing unassigned stock into bins
`wms_receipts`	Printed transaction receipts
`wms_item_sync`	Syncing items from SAP

WMS_SETUP — Warehouse layout

Feature	Unlocks
`wms_warehouses`	Warehouses
`wms_zones_aisles`	Zones and aisles
`wms_shelves_bins`	Rack bays, shelves, bins, bulk bin creation, shelf duplication, bin flags
`wms_putaway_rules`	Putaway rules
`wms_unit_conversions`	Unit conversions
`wms_layout_map`	The setup home and layout map
`wms_hierarchy_defaults`	Naming and numbering defaults
`wms_csv_import`	Layout import and its template

MRP — Manufacturing

Chapter 10

Feature	Unlocks
`mrp_dashboard`	The manufacturing dashboard
`mrp_bom`	Work centres and bills of materials
`mrp_mo`	Manufacturing orders: create, edit, confirm, start, receive, close, cancel, unbuild, extra issue, operations
`mrp_costing`	The costing view on an order
`mrp_planning`	The planning wizard
`mrp_reports`	MO status, component availability, BOM structure, cost analysis, work centre load, yield, WIP ageing

POS — Point of Sale

Chapter 11

Feature	Unlocks
`pos_dashboard`	The Point of Sale dashboard
`pos_config`	Shops
`pos_session`	Session list, session report and printable report; create rights open and close sessions
`pos_register`	The register. View allows browsing, searching and printing; create is required to take a sale or a refund.

GATEPASS — Gate Pass

Chapter 13

Feature	Unlocks
`gatepass_dashboard`	The gate pass dashboard and report, and the gate pass entry screens

HR — Human Resources

Chapter 14

Feature	Unlocks
`employee_mgmt`	HR hub, employee directory, employee records, import, bulk update, employee types
`employee_offboarding`	Separation dashboard and cases, initiating termination, HR approval and completion

ATT — Attendance

Feature	Unlocks
`daily_attendance`	Attendance dashboard, records, own attendance, daily sheet and its export
`monthly_attendance`	Monthly view and its exports
`attendance_reports`	Grouped attendance report
`attendance_devices`	Device management and sync status
`attendance_import`	Attendance file import
`shift_mgmt`	Shifts and employee shift assignment
`manual_attendance_request`	Requesting an attendance correction and tracking your own
`manual_attendance_approval`	The HR queue for approving corrections
`app_attendance`	Mobile check-in and check-out

LEAVE — Leave

Feature	Unlocks
`leave_application`	Leave dashboard, applying, own applications, own payslips and deductions, resignation
`leave_balance`	Leave balances
`leave_approval`	The manager approval stage, including the manager separation queue
`leave_approval_hr`	The HR approval stage and adjusting an absence with leave
`leave_policies`	Leave types
`leave_calendar`	The holiday calendar

PAYROLL — Payroll

Feature	Unlocks
`salary_processing`	The whole payroll area: periods, salary records, deductions, tax slabs, fiscal years, attendance rules, calculation, runs and payslips

RECRUITMENT — Recruitment

Feature	Unlocks
`recruitment_dashboard`	The recruitment dashboard
`job_request`	Requisitions: list, create, detail, edit
`job_mgmt`	Job postings, and approving or rejecting requisitions
`application_mgmt`	Applications, candidates, interviews, scorecards and offers

PM — Project Management

Chapter 15

Feature	Unlocks
`pm_projects`	Projects and tasks you are on, field service today, timers, worksheet templates and reports, customers
`pm_project_admin`	Creating projects, seeing all projects, worksheet template management, editing PM customers

SCHOOL — School Management

Chapter 19

Feature	Unlocks
`school_dashboard`	The school dashboard and the teacher workspace
`school_config`	Institutions, campuses, years, grades, sections, subjects, periods, document requirements, class–subject assignments
`school_students`	Students, documents, photographs, identity cards, guardian access
`school_admissions`	Admission applications, admitting, enrolment
`school_attendance`	Taking the register, attendance list and report, the notification log
`school_calendar`	The academic calendar
`school_timetable`	Timetable grid, teacher view, workload, substitutions
`school_academics`	Academics hub, assessments, mark entry, report cards, exam terms, grading weights, letter grades, weight templates, gradebook export
`school_diary`	Lesson diary and homework entries
`school_fees`	Fee types, structures, generation, vouchers, payments, claims, imports, contribution application
`school_promotion`	Promotion preview and apply
`school_reports`	Teacher activity and compliance reports
`school_welfare`	Welfare dashboard and student list

WEBSITE — Public website

Chapter 23

Feature	Unlocks
`website_editor`	Editor dashboard, settings, theme, blocks, reorder, preview and publish. Edit rights include publishing. Custom HTML blocks additionally require superuser.

CCTV — CCTV Monitor

Chapter 18

Feature	Unlocks
`cctv_dashboard`	Dashboard, refresh, live preview, snapshot capture
`cctv_config`	Recorders, edge sites, pairing and revocation, agent download, and the wallboard share controls

SAP_REPORTS — SAP Business One

Chapter 24

Feature	Unlocks
`sap_reports_dashboard`	The SAP reports home
`sap_sync`	Synchronisation management, history, logs, and the automatic daemon
`sap_pending_approvals`	The purchase order approval queue, history and audit report
`sap_pending_purchase_orders`	Open purchase orders from SAP
`sap_purchase_order_drafts`	Creating and editing purchase order drafts in SAP, and the search helpers
`sap_payment_tracking`	Payment tracking and its document drill-down
`sap_bank_reconciliation`	The whole SAP bank reconciliation workspace and its report
`sap_sales_reports`	SAP sales reports and live analytics
`sap_reports_settings`	Settings and the connection tests

Permissions outside this scheme

Three areas use their own permission codes rather than the module/feature scheme:

accounting

Chapter 12 — module code accounting. Rights are applied per screen: viewing reports and documents needs view; creating documents needs create; posting, reversing and configuration need edit.

Help Desk

Chapter 17

Code	Allows
`helpdesk.dashboard`	The dashboard
`helpdesk.submit_ticket`	Raising a ticket
`helpdesk.view_all_tickets`	Seeing all tickets, not only your own
`helpdesk.manage_tickets`	Assigning, changing status, internal comments
`helpdesk.setup`	Departments, categories, fields, assignees
`helpdesk.reports`	Reports

merchandising

Chapter 16 — module code merchandising, controlling territories, store profiles, objectives, routes and visits.

Suggested role starting points

Adapt these; they are a starting point, not a prescription.

Role	Give
Storekeeper	`INVENTORY` view + create on `stock_operations`, `traceability`; view on `inventory_reports`
Warehouse supervisor	The above plus `inventory_adjustments`, `warehouse_config`, and `WMS_*` as the site needs
Sales officer	`sales` view + create on `sales_orders`; `PARTNERS` view
Purchasing officer	`purchase` view + create; `PARTNERS` view; `INVENTORY` view
Accountant	`accounting` full; `PARTNERS` view; `INVENTORY` view on reports
HR officer	`HR`, `ATT`, `LEAVE`, `PAYROLL`, `RECRUITMENT` as the job requires
Line manager	`LEAVE` `leave_approval`; `ATT` view; `PM` `pm_projects`
Employee (self-service)	`LEAVE` `leave_application` and `leave_balance`, `ATT` `daily_attendance` and `manual_attendance_request` — *all with own data only* set**
Cashier	`POS` `pos_dashboard` view, `pos_session` view + create, `pos_register` view + create
Teacher	`SCHOOL` `school_dashboard`, `school_attendance`, `school_diary`, `school_academics`, `school_timetable` view
School administrator	All `SCHOOL` features
Administrator	`ADMIN` `user_mgmt` and `role_mgmt`; `COMPANY`

Two rules that save trouble later:

Grant view first, add other rights on request. It is easier to add a missing right than to discover everyone could delete invoices.
Keep approve separate from edit. A person who may authorise a document usually should not be able to change it. That separation is the control.