1What this screen is for #
- Roles defines what exists.
- Users decides who holds what. Tick, then Save roles.
2Step by step #
A role names a level of trust — sysadmin, operator, developer — that users carry into every permission check.
- Press Add (F3) , name the role, and save with F5 .
- Assign users to it; their permission checks answer according to the role from their next sign-in.
3Rules and integrity #
- Role names are unique.
- A system role cannot be renamed or deleted — the application looks it up by name, so a rename would revoke access without touching a single grant.
- A role still held by someone cannot be deleted. Revoke it first, or mark it inactive.
- An inactive role cannot be newly granted, but whoever already holds it keeps it until you revoke it.
- Only an Administrator may open this screen. Gating it on a role that can be granted here would make the gate self-issuing.
4Why a change is not immediate #
- Roles are written into the sign-in token, so the server can trust them without re-reading the database on every request.
- A user therefore keeps their old roles until they sign out and back in.
- To remove access immediately, disable the login in the user master instead.
5Shortcut keys #
- F3 — reload.
- F5 — save whichever pane you are in.
6If something does not work #
"The role name is too long." / "That role no longer exists."
- Why
- The name is over the limit, or the role was deleted while you had it.
- What to do
- Shorten the name; press F2 to refresh.
"Mark it inactive instead."
- Why
- The role is in use, so deleting it would strip rights from whoever holds it.
- What to do
- Make it inactive; people keep working until they are moved off it.
"Role '...' created." / "Role '...' saved." / "Role '...' deleted."
- Why
- Not errors - the screen confirms what it did.
- What to do
- The change reaches a user at their next sign-in.
The application does not recognise a renamed role
- Why
- Roles are looked up BY NAME.
- What to do
- Do not rename a role that code or a template refers to - make a new one instead.
This is the help InvoiceNET® ERP shows beside the User Roles screen. Whether you have the screen depends on the modules of your licence and the rights your administrator has given you.
See this screen for yourself
The demo is the real product, with a company of your own.