D.2 New Auto Generated roles

This role combines all GL account and GIFI code rights.

This role allows creation of new GL accounts.

This role allows deletion of GL accounts. Please note that there are only very few circumstances where a GL account can be deleted. Instead of deleting the account, the user is advised to mark the account as ’obsolete’.

This role allows modification of GL accounts.

This role allows creating new use-cases for GL accounts (so called ”account link descriptions”).

This role combines all (batches of) purchase transaction and invoices permissions.

This role allows creation of new purchase invoices (not purchase transactions).

This role allows creation of batches of new purchase invoices (not purchase transactions).

This role allows creating and viewing purchase transactions and accounts as well as creating attachments.

This role allows creation of purchase transactions (not invoices).

This role allows creation of batches of new purchase transactions (not invoices).

This role allows viewing of purchase transactions and invoices.

This role allows creation of batches of both purchase transactions and invoices.

This role combines all (batches of) sales transaction and invoices permissions.

This role allows creation of new sales invoices (not sales transactions).

This role allows creation of batches of new sales invoices (not sales transactions).

This role allows creating and viewing sales transactions and accounts as well as creating attachments.

This role allows creation of new sales transactions (not nvoices).

This role allows creation of batches of new sales transactions (not invoices).

This role allows viewing of sales transactions and invoices.

This role allows creation of batches of both sales transactions and invoices.

Stocking assemblies means converting labor and parts to stocked assemblies.

This role combines all assets rights.

This role allows approving the output of the depreciation procedure.

This role allows running the asset depreciation procedure.

This role allows creation of new assets.

This role grants delete access to the audit trail table.

This role grants read access to the audit trail table.

This role only allows access to menu items Preferences, Logout, and New Window. The user basically cannot do anything without added additional roles.

This role allows creation of new batches and vouchers.

This role allows listing existing batches.

This role allows posting batches of e.g. transactions, payments and invoices.

This role allows searching, viewing and approving of budgets.

This role allows creation and updating of budgets.

This role allows searching and viewing budgets as well as marking them obsolete (=no longer applicable).

This role allows searching and viewing of budgets.

This role combines the create and edit righs for ’type of business’ classes.

This role allows creation of new ’type of business’ classes.

This role allows modification of ’type of business’ classes.

This role allows searching, viewing, creation and editing of business (reporting) classes and their members.

This role combines the all reconciliation rights with the rights to enter payments and receipts.

This role combines all ’contact_class_$\ast$’ and ’contact_$\ast$’ roles and grants all access rights to all contact classes.

This role allows access to cold sales lead contact data. Combine with ’contact_read’, ’contact_create’, ’contact_edit’ and/or ’contact_delete’ to determine the type of access granted.

This role allows access to contact data (e-mail, phone, etc) of all kinds of contacts (customer/vendor/…). Combine with ’contact_read’, ’contact_create’, ’contact_edit’ and/or ’contact_delete’ to determine the type of access granted.

This role allows access to customer contact data. Combine with ’contact_read’, ’contact_create’, ’contact_edit’ and/or ’contact_delete’ to determine the type of access granted.

This role allows access to employee contact data. Combine with ’contact_read’, ’contact_create’, ’contact_edit’ and/or ’contact_delete’ to determine the type of access granted.

This role allows access to hot sales lead contact data. Combine with ’contact_read’, ’contact_create’, ’contact_edit’ and/or ’contact_delete’ to determine the type of access granted.

This role allows access to sales lead contact data. Combine with ’contact_read’, ’contact_create’, ’contact_edit’ and/or ’contact_delete’ to determine the type of access granted.

This role allows access to referral contact data. Combine with ’contact_read’, ’contact_create’, ’contact_edit’ and/or ’contact_delete’ to determine the type of access granted.

This role allows access to robot (automated process, acting on behalf of…) contact data. Combine with ’contact_read’, ’contact_create’, ’contact_edit’ and/or ’contact_delete’ to determine the type of access granted.

This role allows access to subcontractor contact data. Combine with ’contact_read’, ’contact_create’, ’contact_edit’ and/or ’contact_delete’ to determine the type of access granted.

This role allows access to vendor contact data. Combine with ’contact_read’, ’contact_create’, ’contact_edit’ and/or ’contact_delete’ to determine the type of access granted.

Each contact_class_<resource> role, when paired with contact_read, enables this access for the specific <resource>. On it’s own, the contact_create-role does not provide any rights.

Each contact_class_<resource> role, when paired with contact_read, enables this access for the specific <resource>. On it’s own, the contact_delete-role does not provide any rights.

Each contact_class_<resource> role, when paired with contact_read, enables this access for the specific <resource>. On it’s own, the contact_edit-role does not provide any rights.

Each contact_class_<resource> role, when paired with contact_read, enables this access for the specific <resource>. On it’s own, the contact_read-role does not provide any rights.

This role combines all rights for countries.

This role allows creation of new countries.

This role allows modification of countries.

This role allows modification of existing draft (= saved) transactions.

This role allows posting of saved transactions to the ledger.

This role allows creation, updating and searching of employees.

This role allows searching, viewing and editing of currencies, exchange rates and exchange rate types.

This role allows attaching files to entity credit accounts (customers/vendors).

This role allows attaching files to entities (contacts).

This role allows attaching files to orders and quotes.

This role allows attaching files to goods and services.

This role allows attaching files to transactions and invoices.

This role allows reading of files attachments and files uploaded through the system menu.

This role allows uploading of files through the system menu.

This role allows running of financial reports: Income Statement, Balance Sheet, Trial Balance and Inventory & COGS.

This role allows creation of new GIFI codes.

This role allows modification of GIFI codes.

This role combines GL transaction and batch creation with GL reporting and year-end processing.

This role allows searching transactions in the general ledger.

This role allows creation of new and updating of saved GL transactions.

This role allows creation of batches of GL transactions.

This role allows adjusting inventory by creating inventory adjustment reports.

This role grants all rights to manage warehouse configuration, stock receipt, shipping and transfer.

This role allows confirmation of inventory adjustments by approval of inventory adjustment reports.

This role allows receiving of parts into stock.

This role allows searching for and reading existing inventory adjustment reports.

This role allows shipping of stocked parts.

This role allows moving stock between warehouses.

This role allows creation of new languages.

This role allows modification of languages.

This role combines the rights to generate orders from time cards, purchase orders from sales orders and consolidate (purchase and sales) orders.

This role combines all order generation and consolidation rights.

This role allows generating consolidated purchase orders from multiple outstanding purchase orders.

This role allows generating consolidated sales orders from multiple outstanding sales orders.

This role allows generating purchase orders from sales orders.

So as to let the user of this role see/manage pricing per customer, this role includes the ability to read contacts.

This role allows deletion of existing parts.

This role allows changing existing parts.

This role allows entry of payments to vendors.

This role allows creation of new price groups.

This role allows changing existing price groups.

This role allows creating purchase orders.

This role allows (searching for and) deleting existing purchase orders.

This role allows (searching for and) modifying existing purchase orders.

This role allows searching and viewing sales orders.

This role allows entry of receipts from customers.

This role combines creation, updating and approval rights for reconciliation reports.

This role allows approval of reconciliation reports.

This role allows creation and updating of reconciliation reports.

This role allows access to the Recurring Transactions menu; it does not grant rights to list or create transactions.

This role allows creating (purchase) requests for quotation.

This role allows (searching for and) deleting existing requests for quotation.

This role allows searching and viewing (purchase) requests for quotation.

This role allows creating sales orders.

This role allows (searching for and) deleting existing sales orders.

This role allows (searching for and) modifying existing sales orders.

This role allows searching and viewing sales orders.

This role allows creating sales quotations.

This role allows (searching for and) deleting existing sales quotations.

This role allows searching and viewing sales quotations.

This role combines all rights for Standardized Industry Codes (SIC).

This role allows creation of new Standardized Industry Codes (SIC).

This role allows modification of Standardized Industry Codes (SIC).

This role combines the rights to manage settings, GL accounts, types of business, SIC, users and tax forms.

This role allow changing items in the System > Defaults menu.

This role allows viewing items in the System > Defaults menu.

This role allows modification of tax forms.

This role allows changing tax rates on tax accounts.

This role allows modification of document (e.g. invoice) templates.

This role allows adding time cards for which it needs read access to customers.

This role allows viewing the list of time cards; for which it needs read access to customers.

This role allows generating orders from time cards.

This role allows deletion of template (i.e. unposted) transactions.

This role allows creation of translations for parts, parts groups and reporting units.

This role allows addition and removal of users to the current company.

This role allows deletion of vouchers (i.e. groups of e.g. payments).

This role allows creation of (configuration of) new warehouses.

This role allows updating of (configuration of) existing warehouses.

This role allows undoing a prior year-end run by reversing the year-end transaction.