Roles and Permissions
Velosity uses roles to shape each user's navigation and access to particular actions. An administrator can assign more than one role to an account. Users with multiple roles can switch their active role from the user menu; switching roles changes the navigation shown for the current session.
Roles are one part of access control. An organization's enabled features and settings, the status of a record, and other business rules can also allow or block an action. For example, both ADMIN and POWERUSER can maintain customers, but neither can add or edit them when customer changes are disabled in Organization settings.
Roles available to organization administrators
The Accounts role picker includes the following roles. Some roles appear only when the corresponding feature is enabled.
| Role | Intended access |
|---|---|
| ADMIN | Organization setup, account administration, and all standard application areas. |
| POWERUSER | Operational data maintenance without general access to Administration. See POWERUSER permissions. |
| BILLING | Billing workflows and billing-focused navigation. |
| MAINTAINER | Smart Quote configuration maintenance. |
| MGMT | Management's sales-focused home view, sales targets, quoting, orders, customers, and approval-policy participation. It does not grant Administration access. |
| SALES | Sales Quotes, Sales Orders, Smart Quote, Product Finder, and customer-facing sales work. |
| PROJMGMT | Project and production coordination, including service, basic sales views, production, and company information. It does not grant Administration access. |
| PLANNING | Production planning, scheduling, queues, service, basic sales views, and company information. Shown when Production is enabled. |
| WAREHOUSE | Warehouse workflows, basic sales views, and company information. |
| LOGISTICS | Shipping and logistics workflows, production, basic sales views, and company information. |
| QUALITY | Quality workflows, production, basic sales views, and company information. |
| PURCHASING | Purchasing workflows, production, basic sales views, and company information. |
| MAINTENANCE | Maintenance and production workflows. Shown when Maintenance is enabled. |
| CUSTOMERSERVICE | Service, sales, production, and customer workflows. The picker labels this role Customer Service. |
| SHOP | A focused shop-floor interface for queues, tasks, and production work. |
| TECH | Shop-floor work in the full application interface. |
| DEVELOPER | Developer and integration-oriented access. |
| MONITOR | Monitoring-oriented access. |
The active role primarily controls the navigation perspective. Access checks can consider any role assigned to the user for the current organization, so users do not always need to switch their active role before performing an allowed action.
POWERUSER permissions
POWERUSER is intended for trusted users who maintain operational records but should not receive full organization-administration access. Current POWERUSER permissions include:
- Add, edit, duplicate, and maintain customers and their contacts when customer changes are enabled in Organization settings.
- Maintain customer Ship To records, including import and delete operations.
- Maintain Item Catalog records and item attributes, including the item-attribute import used to prepare data for Product Finder.
- Maintain locations.
- Maintain Service Codes and Repair Templates.
- Return a completed Sales Order to Draft, including the Repair missing source lines recovery flow.
POWERUSER does not open the general Administration area or user-account setup. Draft Sales Quote deletion is not a POWERUSER-specific permission: a user who can work with a quote can delete the quote while it is in Draft. The application blocks deletion after the quote leaves Draft.
Setup and administration
Organization setup screens, including Accounts, Customization, terminology, scheduling setup, email settings, and integrations, require ADMIN. Velosity's internal SUPPORT users can also access many setup screens when assisting an organization. Standard organization roles, including POWERUSER, MGMT, and PROJMGMT, cannot view the Administration dashboard.
Assign the least access needed for a person's work. Use POWERUSER for operational data stewards and ADMIN for people who manage organization configuration and user access.