Managing Users and Roles

DigiERP features a granular Role-Based Access Control (RBAC) matrix. Access is restricted using permission policies checked on both the client UI and the server API.

System Roles

1. Tenant Owner

   • Full administrative control.
   • Access to Billing settings, payment updates, and tenant-wide configurations.
   • Permission to delete or export the entire workspace dataset.

2. Admin

   • Manage team members, roles, leads, and tasks.
   • View organization reports and metrics.
   • Configure integration triggers.

3. Staff

   • Access designated tools (Notes, ReChat, Tasks, Calendar).
   • Only view or modify leads and projects assigned to them.

Customizing Permissions

Go to Settings > Roles to customize permissions. Toggle module checkboxes to update access.

// Checked permissions are validated on server actions
export function hasPermission(userPerms: string[], required: string) {
  return userPerms.includes(required) || userPerms.includes("admin:*");
}