How access works in Beezr

Access in Beezr is built from a few small pieces. Each answers one question, and you set them in order: who is the person, what group are they in, what can that group open, which records can they see.

1. User
2. Role
3. Permission profile
4. Record rules
5. Org chart

Piece	Question it answers	Page
User	Who can sign in?	Add and manage users
Role	Which group is this person in?	Create roles and assign people
Permission profile	Which apps and modules can the group open, and what can it do there?	Permission profiles
Record rules	Which records inside a module can they see?	Choose which records people see
Org chart	Who counts as “my team” for team records?	Build the org chart

○ ○ ○Beezr

×

Add User creates the account. Roles come next.
The Roles column shows how many roles a person has. Click it to see them.

What do I set up first?

1. Create the permission profiles that match your jobs, for example “Buyer” and “Approver”.
2. Create a role for each profile and assign people to it.
3. Add record rules where a profile should see only some records.
4. Draw the org chart if managers should see their team’s records.

People get a profile’s changes the next time they sign in.

Tip from a Beezr Consultant

Name profiles and roles after the job, not the person. “Procurement buyer” still makes sense when Omar moves to another team.

Where is everything?

Open Account settings and choose Users & Security. The hub holds Users, Permissions, Roles and Organizational Chart, followed by the Beezr Shield tools: Encryption Keys, Multi-Factor Authentication, Single Sign-on and Geo Fencing.

Record security is something you set up. A profile with no record rules, and with Team records off, lets people see the records they created. Add rules when you need a different answer.