QUICK STEPS
Choose between two permission methods: by role (recommended, more maintainable) or by user (overrides role settings for one specific person).
For role-based permissions, select from the available roles: Administrator, Manager, Operator, Salesman.
Use the permissions tree (mirrors the left navigation menu) to Hide or View each section.
Control record access per role/permission — options include seeing all records or only records the user is assigned to (Limited).
For a standard sales rep setup: give access to Leads, Customers, Quotes, and Invoices, and set record access to Limited so they only see their own leads/customers.
Hide sensitive fields like unit cost and total cost where sales reps don't need visibility into internal profit data.
Hide entire tabs (e.g., Work Order, Order Material, Inventory) for roles that don't need them.
If using permission by user, document why the override exists — it's harder to audit and can create inconsistencies.
TIPS:
💡 After setting up permissions, test-login as each role to confirm the view matches what you intended — easier to fix before anyone is live in the system.
⚠️ Use permission by user sparingly — it overrides role settings and is harder to audit over time.
Remember: Start with role-based permissions for maintainability; reserve user-level overrides for documented exceptions only.