A role is a set of predefined permissions that determines what actions a user can perform in the system. Each user is assigned one or more…

What is a Role?

A role is a set of predefined permissions that determines what actions a user can perform in the system. Each user is assigned one or more roles that define their access level.

🏗️ Role Hierarchy Structure

Level 1: Full Control

Super Admin: Full access with no restrictions

Level 2: Operational Management

Admin: Full operations management
Manager: Oversight and analysis

Level 3: Specific Operations

Accountant: Financial management
Seller: Sales management
Courier: Delivery management

Level 4: Support and Customers

Support: Customer assistance
Customer: Self-service (a single, fixed sender)
Reseller: Self-service with several senders
API: Programmatic access

📊 Quick Capability Comparison

Order Management

✅ Can create orders: Super Admin, Admin, Seller, Customer, Reseller
✅ Can edit orders: Super Admin, Admin, Seller
✅ Can edit address/description of their own orders: Customer, Reseller
✅ Can delete orders: Super Admin, Admin
✅ View-only orders: Manager, Accountant, Courier, Support
✅ Only see their own orders: Customer, Reseller

User Management

✅ Can create users: Super Admin, Admin
✅ Can assign roles: Super Admin only
✅ Can view users: Super Admin, Admin, Manager

System Configuration

✅ Full access to configuration: Super Admin only
✅ Organizational configuration: Super Admin, Admin
✅ Rate configuration: Super Admin, Admin
✅ View-only: Manager

🔑 System Principles

1. Principle of Least Privilege

Each user receives only the minimum permissions necessary to do their job.

2. Separation of Duties

Roles are designed to clearly separate operational responsibilities.

3. Scalability

The system lets you create custom roles based on business needs.

4. Secure by Default

New users have no permissions until a specific role is assigned to them.

💡 How to Choose the Right Role?

Key Questions:

What tasks will the user perform daily?
Do they need to create information or just view it?
Will they handle financial information?
Will they have direct contact with customers?
Do they need to configure the system?

Recommendations by User Type:

The first categories describe employees of your organization. The last two (Customer and Reseller) are self-service accounts for external users.

Business Owner

→ Recommended Role: Super Admin

Full control of the system
Management of critical configuration
Access to all information

Operations Manager

→ Recommended Role: Admin

Full daily management
No access to critical configuration
Can manage users and operations

Area Supervisor

→ Recommended Role: Manager

Oversight and reports
Can’t modify configuration
Access to metrics and analytics

Sales Staff

→ Recommended Role: Seller

Create and manage orders
Manage customers
No administrative access

Couriers/Delivery Staff

→ Recommended Role: Courier

View assigned orders
Update delivery statuses
Limited access to information

End customer with a single sender

→ Recommended Role: Customer

Creates orders with their own sender (assigned automatically)
Only sees their own orders and recipients
No “Senders” screen in the menu

Reseller who operates for several senders

→ Recommended Role: Reseller

Keeps their own address book of senders and reuses it when creating orders
Only sees their own orders, senders, and recipients
Designed for users who dispatch shipments on behalf of several businesses

🔄 Changing Roles

Who can change roles?

Only the Super Admin can assign or change roles

When to change a role?

When an employee’s responsibilities change
To grant temporary access to specific functions
When promoting or changing an employee’s position

Change Process:

The administrator assesses the new needs
Selects the appropriate role
Assigns the new role to the user
The change is immediate

⚠️ Important Considerations

Security:

Roles with more permissions carry greater responsibility
Periodically review assigned roles
Remove access when it’s no longer needed

Best Practices:

Don’t share credentials between users
Each person should have their own user account
Document role changes
Train users on their new permissions

📞 Support

If you need to:

Change your role: Contact your administrator
Understand your permissions: Check the documentation for your specific role
Report a problem: Contact technical support
Request an additional permission: Justify the need with your supervisor

Role System Overview - Sistrack