Fine-Grained Permission Model

Manage users and user groups with a fine-grained and comprehensive permission model.

Create Users and Groups

Create new users and assign them to one or more user groups. You can invite new users via email or set an initial login and password manually. For each user, you can set an individual time zone and locale. Beyond built-in system user groups, you can create customizable user groups.

Set Application Permissions

You can define the applications and modules which you want to give a user group access to. When a user group member logs in, only authorized applications and authorized modules will be displayed, and records from unauthorized modules will be hidden.

Manage Entity Permissions

For each user group, you can specify which entities may be created, changed, and deleted. You can set these permissions for system entities, as well as for custom entities. To hide an entity for a user group, you can remove the module permission for this entity and user group.

Define Field Permissions

For each user group and entity, you can define which fields may be displayable and updateable. You can set these permissions for system fields, as well as for custom fields. Setting field permissions enables a powerful fine-grained authorization concept.

Set Action and Access Permissions

Action Permissions define the actions user group members can invoke, for example, you can define which user groups are authorized to send an email or export a spreadsheet. Access Permissions can be set on filter queries, dashboards, graphs, reports, and more. Objects of these entities will only be displayed to the objects' authorized user group members.