Docs
Roles and permissions: who can see what
A role is a set of permissions. A permission names a screen and an action — such as items:add.
How do permissions work in Pashkateb?
Every user has a role. A role is a set of permissions. Each permission names a screen and an action — such as items:add, meaning creating items.
Where to find it
Administration → Roles, or /dashboard/roles.
Creating custom roles needs the company admin role or higher.
Two layers
The base roles
| Role | What it means |
|---|---|
| Super admin | Full access to everything on the platform |
| Company admin | Full access within their company |
| Admin | Administrative permissions |
| Company user | Whatever their permissions allow |
A super admin sees everything regardless of permissions. A company admin has access to every screen their role allows.
Company user is where permissions actually decide things.
Custom roles
You create these for your team: storekeeper, accountant, sales rep, customer service.
The shape of a permission
module : action
| Permission | What it means |
|---|---|
items:view | Can see the Items screen |
items:add | Can create an item |
items:edit | Can change an item |
sales_invoices:submit | Can submit a sales invoice |
reports:stock_evaluation | Can open the stock evaluation report |
The full list is in the permission reference.
The role form
| Field | Details |
|---|---|
| Role name | Something clear, like "Storekeeper" |
| Permission matrix | A card per module, with permission checkboxes inside |
Each module has a select all checkbox that ticks every permission at once, showing an indeterminate state when only some are ticked.
Reports have a permission per report — so you can give your accountant the financial reports without the stock reports.
What a missing permission looks like
| Missing | Result |
|---|---|
view on a screen | The screen does not appear in the menu at all |
add | The create button does not appear |
edit | The edit action on rows does not appear |
submit | The submit action does not appear |
| A report permission | That report does not appear in the reports menu |
This is why an employee says "the screen is not there for me" — it is there, their role just lacks the permission.
Suggested roles
Storekeeper
items:view · items:add · items:edit · warehouses:view · warehouse_transfers:view · warehouse_transfers:add · stock_ledgers:view · stock_adjustment:view · stock_adjustment:add · reports:stock_evaluation · reports:stock_by_warehouse · reports:low_stock_warehouse
Accountant
accounts:view · journal_entries:view · journal_entries:add · general_ledger:view · payment_entry:view · payment_entry:add · reports:trial_balance · reports:profit_and_loss · reports:balance_sheet · reports:general_ledger
Sales rep
sales_invoices:view · sales_invoices:add · customers:view · customers:add · items:view · lead:view
Notice the sales rep has no sales_invoices:submit — they can prepare drafts, and submission stays with someone more senior. That is a common and useful arrangement.
Tips
- Start narrow and widen. Adding a permission is easier than discovering someone did something they should not have.
- One role per real job, not one per person.
- Review your roles periodically, especially after someone changes department.
- Create the role before the user — so it is there in the list when you add them.
Frequently Asked Questions
An employee cannot see a screen — why?
Their role lacks the view permission for it. The sidebar is filtered by permissions, so the screen does not appear at all. Open the Roles screen and tick the permission.
They can see a screen but not the edit button
They have view without edit. Row actions are filtered by permission too, so they can read the data but not change it. That is a deliberate arrangement for viewers.
Do company admins need permissions?
A company admin has access to every screen their role allows without individual permissions being ticked. A super admin sees everything on the platform.
How many roles should I create?
One per real job in your business — storekeeper, accountant, sales. Many nearly identical roles become hard to maintain.
Related Links
Use Pashkateb with Your Real Workflow
Start the free trial or move to the most relevant landing page for your workflow, then apply what you read using your own invoices, stock, and reports.