Permissions reference

Every permission a role can grant, what it allows in the app, and which module it belongs to. Keys read as Resource.Action; a key ending in .Own is shown in the role editor as "· mine".

How to read this page

Platform permissions are available to every organisation. They cover the foundation: users, roles, locations, the organisation, reporting.
Module permissions only work when the organisation licenses that module. They still appear here so you can plan roles ahead of licensing.
The owner holds every permission automatically and needs no role.
Where a permission has a "mine" variant, that variant reaches only the records the person created. Holding both means all. See Roles.
A hidden button is a courtesy. The server checks the same permission on every request.

Platform

Key	Allows	Where
`Users.View`	Open the Users list and any user.	Users
`Users.Create`	Add a person, with their sign-in method, credentials, roles and locations.
`Users.Edit`	Change a person's details, roles, locations, sign-in method and PIN; deactivate and reactivate.
`Users.Delete`	Remove a person from the organisation, and restore a removed person.
`Roles.View`	Open the Roles list and any role.	Roles
`Roles.Create`	Create a role.
`Roles.Edit`	Change a role's name, description and permissions.
`Roles.Delete`	Delete a role that no one holds.
`Locations.View`	Open Locations; also required to see and change the Locations card on a user.	Locations
`Locations.Create`	Add a location.
`Locations.Edit`	Change a location, its logo, default flag and active state.
`Locations.Delete`	Delete a location.
`Tenant.View`	Reserved. The Organisation page is owner-only in this release.	Organisation
`Tenant.Edit`	Guards saving the organisation's name and locale. The page itself is still shown to the owner only.	Organisation
`Subscription.View`	Reserved. Reads the organisation's licensed modules; no screen uses it yet.	No screen
`Subscription.Manage`	Reserved. Licensing is arranged with Greyield Labs and changed only in the operator console; no tenant screen or endpoint changes it.	No screen
`Audit.View`	Reads the organisation's audit log (API only; no screen in the app yet). Every action in the organisation is recorded with the person who did it.	No screen
`Audit.Export`	Reserved.	No screen
`Security.View`	Shows the Security page: session lifetime policies per platform and sign-in method.	Security
`Security.Edit`	Saves the Security page (session lifetime policies today). Changes reach live sessions within about 15 minutes.	Security
`Configuration.View`	Reserved. Low-level read of the organisation's configuration store.	No screen
`Configuration.Edit`	Reserved. Low-level write to the configuration store. Receipt settings use `Receipts.Configure` instead.	No screen
`Reports.View`	Show Reporting and run reports on modules whose plain View permission you also hold.	Reporting
`Reports.Export`	Export reports to CSV or Excel and email them.	Reporting

Receipts module

Key	Allows
`Receipts.View`	Open the Receipts list and any receipt; print the first copy; read receipt settings, branding and custom fields.
`Receipts.View.Own`	The same, for receipts this person issued.
`Receipts.Create`	Issue Receipts, including searching customers and products for the receipt and downloading the offline snapshot.
`Receipts.Reprint`	Print any copy after the first (stamped DUPLICATE).
`Receipts.Delete`	Delete any receipt. It leaves the list and every report; its number stays used and the deletion is audited.
`Receipts.Delete.Own`	The same, for receipts this person issued.
`Receipts.Configure`	Change Branding, Footer Note, Custom Lines, Locations, Signatures and Custom Fields under Receipt settings.
`Receipts.Export`	Reserved. Nothing uses it; receipts are exported through Reporting.

Guides: Receipts.

Customers module

Key	Allows
`Customers.View`	Open the Customers list and any customer.
`Customers.View.Own`	The same, for customers this person created.
`Customers.Create`	Add a customer, on the Customers screen or from a receipt.
`Customers.Edit`	Change any customer.
`Customers.Edit.Own`	Change customers this person created.
`Customers.Delete`	Delete any customer.
`Customers.Delete.Own`	Delete customers this person created.

Guides: Customers.

Products module

Key	Allows
`Products.View`	Open the Products list and any product.
`Products.View.Own`	The same, for products this person created.
`Products.Create`	Add a product.
`Products.Edit`	Change any product, including Active/Inactive.
`Products.Edit.Own`	Change products this person created.
`Products.Delete`	Delete any product.
`Products.Delete.Own`	Delete products this person created.

Guides: Products.

Inventory module

Key	Allows
`Inventory.View`	Open the Inventory list, any record and its trail; see the Inventory card on products.
`Inventory.View.Own`	The same, for records this person switched tracking on for.
`Inventory.Adjust`	Record adjustments on any record.
`Inventory.Adjust.Own`	Record adjustments on records this person switched tracking on for.
`Inventory.Manage`	Switch tracking on or off for a product at a place.

Guides: Inventory.

Reports and module permissions together

A report is offered only when you hold Reports.View and the plain View permission of the module it reads. The full mapping is in the Report catalogue.