User Roles & Permissions

rolepermissionaccessuseradminrightsrbac

Description

Role-based access control system to manage who can access what in ScomsERP.

Default Roles

Role

Access

Typical Users

Super Admin

Full system access

IT Head, Director

Admin

All modules, no settings

Principal, Manager

Accountant

Finance modules only

Accountant, Cashier

Teacher

Academic modules

Class Teachers, Subject Teachers

Librarian

Library module

Librarian

Parent

Parent portal only

Parents/Guardians

Student

Student portal only

Students

Reception

Admission & front desk

Receptionist

Creating Role

  • Go to Application Secutiry> Roles

  • Click Add Role

  • Enter Role Name and Description

  • Select permissions from the module list

  • Choose View, Create, Edit, or Delete for each module

  • Save the role

  • Assign role to users in User Management > Users

Permission Levels

Level

Description

View

Can only view data, no modifications

Create

Can add new records

Edit

Can modify existing records

Delete

Can remove records (use with caution)

Export

Can download reports and data

Approve

Can approve/reject requests

Security Warning

Only Super Admin users should have Delete permissions. Regularly audit user access and remove inactive accounts.