Instead of a standard role, a Group can be assigned a custom role with individually set permissions. In User Management, permissions are grouped by module; the toggle of a module activates its base permission (usually "view"), and further permissions can be switched on below it.
Good to know
Permissions build on each other: e.g. "delete Suppliers" requires "create Suppliers", and "create Suppliers" in turn requires "edit Suppliers".
Some permissions are switched on together, e.g. "create and edit Requests" also grants viewing Request Templates and Supplier lists.
Which modules are shown depends on the modules enabled for your organization.
"view Articles", "view Categories" and viewing Attributes and profile layouts are core permissions and cannot be removed.
Only available via the Key user/Admin standard roles
The following permissions cannot be granted individually in custom roles, only via the predefined roles:
manage Table Views
manage Attributes
manage Profile Layouts
edit organization settings
manage users and roles, manage Groups
Restricting "view Suppliers" selectively
Settings → Workspace → User Management → Groups → open a Group → "Permissions" → "Manage permissions" → "Custom" → deactivate the view Suppliers permission. Members then no longer see the Suppliers page. ❗ Limitation: the permission is still required in RFQs (otherwise no Supplier selection is possible); in Analytics, Suppliers remain visible as labels but cannot be opened.
Granting Evaluation permissions granularly
For the Evaluations module, the rights to create, edit, conclude and share Evaluations can be granted separately per role. Concluded Evaluations are additionally protected: only users with the permission to conclude can reopen a concluded Evaluation and conclude it again – the responsible person and time are recorded.
Configure: Settings → Workspace → User Management → Groups → open a Group → "Permissions" → "Manage permissions" → "Custom" → set the Evaluation permissions individually (create, edit, conclude, share with Suppliers).
Note: Available for customers with the Evaluations module.
Deactivating Negotiation Notes and Activities per role
For a role, the separate permissions access Negotiation Notes and access Activities can be deactivated selectively – giving you granular control over access to these areas.
Set: Settings → Workspace → User Management → Groups → open a Group → "Permissions" → "Manage permissions" → "Custom" → activate or deactivate access Negotiation Notes or access Activities.
Note: Both permissions are enabled for all standard roles and existing custom roles until you deactivate them.