Permission profiles

Before you start

• Create roles and assign people

A permission profile says which apps a group can open and what it can do with each module. You attach a profile to a role, and everyone in the role gets it.

Where do I find the profiles?

Open Account settings › Users & Security and choose Permissions. The Permission Manager lists every profile with its name and description. Use New Permission Set to start one. The copy icon (Create Copy) duplicates a profile under a new name, which is the quickest way to make a variation. The bin icon deletes one after you confirm.

What is on the profile page?

○ ○ ○Beezr

×

Name the profile. Save profile is top right.
Apps lists the apps the profile can open. Set as landing picks the one that opens first.
Access level holds Team records and Full access.
Tick View, Create, Edit and Delete for each module.
Fields and Records open the field list and the record rules.

Build a profile

1. Click New Permission Set, then type a name such as Procurement buyer at the top.
2. Under Apps, tick the apps the profile can open. Give the profile at least one app.
3. Click Set as landing on the app that should open first after sign-in.
4. In the module grid, tick what the group can do. Untick View to hide a module entirely. Modules that your apps link to appear under Linked modules, so related-record tabs work.
5. Click Save profile.

Beezr shows “Profile saved. People get the change the next time they sign in.”

Hide or lock fields

In a module’s row, click All fields under Fields. For each field, choose Editable, Read-only or Hidden. Set all to… changes every field at once. Click Done, then save the profile.

• Hidden fields are removed from forms.
• Read-only fields display saved values on forms.

Watch out

To keep a value private, store it in a module whose permission profile grants access to the intended people.

What do Team records and Full access do?

• Team records on: people see their own records plus records created by people under them in the org chart. Off: only the records they created.
• Full access: sees every record in every permitted module, skips the record rules and can delete anything. People with Full access can also sign in to the Designer.

To choose records more precisely, use the Records column. See Choose which records people see.