How to set user permissions for sales and finance teams
A salesperson shouldn't be editing invoices; finance shouldn't be changing API keys. VynSales uses granular permissions instead of fixed roles, so you grant exactly what each person needs.
1. How permissions work
Permissions are module.action strings — for example quotations.approve, invoices.manage, users.manage. There are no hardcoded roles; you assign permissions per user, which means you can build any access pattern your team needs.
2. Common groupings
- Sales —
customers.*,quotations.*,orders.* - Finance —
invoices.*,payments.* - Admin —
users.*,billing.*,api.*
Start from a grouping like these, then tighten or loosen per person.
3. Assign permissions to a user
Open the user under Users, then grant the specific permissions for their job. Changes take effect immediately and are enforced on the server, not just hidden in the UI.
4. Scope across companies
If you run multiple companies, permissions apply per company, so someone can be finance in one and read-only in another.
5. Keep an audit trail
On higher plans, audit logs record sensitive changes so you can see who did what.
Start a free trial to set up your team safely.