Business Roles & Permission Packs

Business roles in SmartERP 19 abstract complex technical security groups into intuitive organizational functions.

Role vs. Group Architecture#

+--------------------------------------------------------------------------+
|                     RBAC ABSTRACTION ARCHITECTURE                        |
+--------------------------------------------------------------------------+
| [Employee: Bethlehem T.]                                                 |
|        |                                                                 |
|        v                                                                 |
| [Assigned Business Role: "Senior Accounts Payable Specialist"]           |
|        |                                                                 |
|        +---> [Permission Pack: "Vendor Invoicing & 3-Way Match"]          |
|        |          - account.group_account_invoice                        |
|        |          - purchase.group_purchase_user                         |
|        |                                                                 |
|        +---> [Permission Pack: "Withholding Tax Operations"]             |
|                   - wht_at_payment.group_wht_operator                    |
|                   - smarterp_vat_invoice_et.group_vat_user               |
+--------------------------------------------------------------------------+

Creating a Business Role#

1. Navigate to Settings -> Technical -> RBAC -> Business Roles.
2. Click New:
   • Role Name: Descriptive enterprise title (e.g., Project Controls Lead).
   • Code: Unique alphanumeric identifier (e.g., ROLE_PROJ_CTRL_01).
   • Department: Governing business department.
   • Security Packs: Select pre-configured permission packs (smarterp.rbac.pack).
3. Click Save.
4. When assigning a role to a user, SmartERP computes the union of all underlying security groups and provisions them automatically.