Security Roles and Permissions

Overview

BrightMove uses a robust security model based on Role-Based Access Control (RBAC) to ensure data privacy and control. Access to the system is granted through a combination of user types, roles, and permissions.

User Types: Users can have one or more roles assigned to them, based on their specific job function or access needs.

Roles: A role defines a set of access privileges. Each user can be assigned multiple roles to allow for more granular control. Roles can have 0 to many permissions associated with them.

Permissions: These are specific actions or data access rights. Roles control which permissions a user has.

By leveraging RBAC, BrightMove allows administrators to tailor access and permissions, ensuring each user has only the access they need.

Managing Roles

To manage security roles, go to Control Panel > Security

From the Security link you can manage roles.  

From the Employees link, you can associate 0 to many roles to your users.

From the Company Roles screen, you can add, edit, duplicate and delete security roles.

Managing Permissions

From within the selected role, you can pick and choose the permissions that should be enabled for your scenario.

For example, in the screen below, the role Recruiter does not have the Opportunity module permissions.  You can tell this by the red X next to the permissions.  If you wish for the users with the Recruiter role to have this permission, simply enable the permission by selecting it, and click save.

Any user with this role will now have access to the Opportunity module in this scenario.