AfricaOSAfricaOS

Roles & Permissions

Detailed guide to roles, permissions, and access control

Roles & Permissions

Understand and configure access control for your organization.

Role Hierarchy

Owner
  └── Admin
        └── Manager
              └── Staff
                    └── Viewer

Higher roles inherit all permissions of lower roles.

Permission Matrix

Organization Level

ActionOwnerAdminManagerStaffViewer
View organization
Edit organization
Manage billing
View audit log
Delete organization

User Management

ActionOwnerAdminManagerStaffViewer
Invite users
Change roles
Suspend users
Delete users

Module Access

ActionOwnerAdminManagerStaffViewer
Install modules
Configure modulesAssigned
Access assignedRead-only
Manage workflowsAssigned

Custom Roles (Enterprise)

Create custom roles with specific permissions:

  1. Go to Settings → Team → Roles
  2. Click Create Role
  3. Name and describe the role
  4. Select granular permissions
  5. Assign to users

Example custom roles:

  • Finance Manager - Billing, payments, invoices only
  • HR Manager - Staff, patients, appointments only
  • Inventory Clerk - Stock, suppliers, orders only
  • Receptionist - Bookings, patients (read), schedule

Best Practices

  1. Principle of Least Privilege - Give minimum needed access
  2. Regular Reviews - Audit permissions quarterly
  3. Role-Based - Use roles, not individual permissions
  4. Document Changes - Note why permissions changed
  5. Separation of Duties - No single user controls everything

On this page