Everyone who works in Elreda has an account of their own. What the account may do is governed by permissions, and the role is only a set of default permissions that can be changed one by one.
What is this?
The page Accounts lists every account with name, email, role and status. An account has one of three statuses:
- Invited — the account is created but the person has not completed the first sign-in.
- Active — the person can sign in.
- Suspended — the person cannot sign in, but the account and its history remain.
Clicking a name opens the account card, where the account is managed.
The page Roles and their defaults shows which permissions each role gets by default. A role is a bundle of defaults, nothing more: permission sits on the right itself. Today the page is reached at the address /roller.
Who can do what
The permissions are grouped by what they concern:
| Permission | What it gives |
|---|---|
| View accounts and roles | See the account list, the account cards and the roles. |
| Create and change accounts | Add accounts, suspend and reopen them, and reset sign-in. |
| Assign permissions to others | Give and remove permissions on other accounts. |
| See purchase price and markup | See purchase price and markup. Without it the system works in customer prices. |
| View the customer register | See the customer register. |
| Create and change customers | Add customers, contacts and properties. |
| Read the access log | Read the access log. |
| See installation health | See installation health. No business data. |
A few rules apply whatever the role:
- Nobody can change their own permissions, or suspend and reset their own account. Another admin does that.
- Only an admin can give or remove the right to see purchase price and markup.
- Superadmin is the role that sets up the installation. It can never hold the customer register or price permissions.