Roles & permissionsGROUP
Per-entity and per-user role assignments. The matrix view shows Entity ร Module ร Action; the per-user view shows what each person can actually do, inherited from their role unless overridden.
Margin-code edits are the one action nobody holds outright: every entity needs CFO approval. That is a control, not an omission โ margin is the lever that moves group GP.
Permissions matrix โ Entity ร Module ร Action
| Module | Aluminium master entities | Sales / Project entities | Furniture | |||||||
|---|---|---|---|---|---|---|---|---|---|---|
| JIL | JIC | JTT/JBK | JHK | JSL/JBJ/JSZ | JSG | JKL | Channels | JFS | JFC | |
| Aluminium products ยท Create | ||||||||||
| Aluminium products ยท Push to entities | ||||||||||
| Aluminium products ยท View (received) | ||||||||||
| Local Hardware/Glass/Fire/Pwd ยท Edit (own entity) | ||||||||||
| Margin codes ยท Edit (own entity) | ||||||||||
| BOQ Section A ยท Build & Push | ||||||||||
| BOQ Section B ยท Edit local | ||||||||||
| Reservation approval ยท Approve | ||||||||||
| Reservation approval ยท Request | ||||||||||
| Office matrix ยท Edit | CFO + Master Data Admin only โ group-level governance | |||||||||
| Audit log ยท View all | CFO sees all entities ยท Local Office Admin sees own entity only ยท Sales sees own quotes only | |||||||||