Roles and sharing

A role defines what a Lim & Co user can do in each easySales module. Sharing settings help decide which records are within that user’s reach.

Why it works this way

Each module uses five actions: List, View, Add, Edit and Delete. Each action has level 0 for no access, level 1 for all organisation records, or level 2 for the user’s own records.

The standard Administrator role provides the built-in administrative permission set and cannot be edited. Lim & Co can use Custom Roles to give other users the actions and levels needed for their jobs.

Sharing is a separate layer. Organisation-wide defaults, sharing rules, role hierarchy and team relationships can extend record reach, but they do not turn a denied action into an allowed one.

For example, sharing can place a colleague’s account within reach. The user’s Account View permission must still allow viewing it.

How it relates

Roles answer, “May this user perform this action?” Record scope and sharing answer, “On which records?” easySales applies both questions before allowing access.

Terms

Role: A set of module actions and permission levels assigned to users.
Standard Role: A built-in role whose permissions cannot be edited.
Custom Role: A role whose permissions can be configured for the organisation.
Action: List, View, Add, Edit or Delete.
Sharing: Rules and relationships that affect which records are within reach.

Common misunderstandings

Sharing a record does not override level 0 for the required action.
Level 1 and level 2 describe record scope, not job seniority.
Administrator is a standard role, not a Custom Role that can be rewritten.

Where to find it

These settings explain the record access described in Ownership and visibility. They also affect customer work in Accounts and Contacts.