Rights and Roles

General Information

A user can have multiple roles, each role containing different access rights.
A user without any role is able to login to our Webportal, but will not find any menu entries but managing the own user profile only.

Roles and Rights

Role	Description	Rights
Super User	The initial User has this role. Has rights for everything.	Everything
Admin	To be used to configue the tenant, create API keys and manage Users	Access Management read/write Tenant Management read/write Integration Management read/write
Auditor	To be used for auditing purposes and for users that should not be able to change anything.	Read for everything
Order Manager & Customer Support	To be used for creating and managing Orders and Contracts. Suitable for Sales and Customer Support	Tenant Management read Contract and Order Management read/write Document Management read/write Product Management read Accounts Receivable Management read Customer Management read/write
Finance Manager	To be used for more complex accounting tasks, such as configuring the chart of Accounts, creating reports etc.	Tenant Management read Accounting Management read/write Clearing read/write Reports read/write Document Management read/write Customer Management read Contract Management read Product Management read Accounts Receivable Management read
Accounts Receivable (AR) Manager	To be used for day-to-day accounting tasks, such as AR management.	AR Management read/write Customer Management read Clearing read/write Document Management read/write Tenant Management read Accounting Management read Reports read Contract Management read Product Management read
Product Manager	To be used to set up products and plans.	Product Management read/write Tenant Management read Contract Management read Document Management read
Beta Preview	Access to experimental Webportal features that aren't officially released. A Beta user will only gain access to the features within his other role(s).	n/a

Deprecated Roles

Older users might still have deprecated roles assigned to them. Those deprecated roles will be removed by 2025-10-01. Users that only have deprecated roles assigned to them by this point might lose access to some of the system, so we recommend changing the roles of all users to the v2 roles defined above.